Sign-up

ID

VAR-202104-0180


CVE

CVE-2020-27941


TITLE

macOS  Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2020-017319

DESCRIPTION

A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An application may be able to execute arbitrary code with kernel privileges. macOS Exists in unspecified vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.8

sources: NVD: CVE-2020-27941 // JVNDB: JVNDB-2020-017319 // VULHUB: VHN-372052 // VULMON: CVE-2020-27941

AFFECTED PRODUCTS

vendor:applemodel:macosscope:ltversion:11.1.0

Trust: 1.0

vendor:アップルmodel:macos big surscope: - version: -

Trust: 0.8

vendor:アップルmodel:macos big surscope:eqversion:11.1.0

Trust: 0.8

vendor:アップルmodel:macos big surscope:eqversion: -

Trust: 0.8

sources: JVNDB: JVNDB-2020-017319 // NVD: CVE-2020-27941

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-27941
value: HIGH

Trust: 1.0

NVD: CVE-2020-27941
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202012-1048
value: HIGH

Trust: 0.6

VULHUB: VHN-372052
value: HIGH

Trust: 0.1

VULMON: CVE-2020-27941
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2020-27941
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-372052
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2020-27941
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2020-27941
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-372052 // VULMON: CVE-2020-27941 // JVNDB: JVNDB-2020-017319 // CNNVD: CNNVD-202012-1048 // NVD: CVE-2020-27941

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:Lack of information (CWE-noinfo) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2020-017319 // NVD: CVE-2020-27941

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202012-1048

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202012-1048

PATCH

title:HT212011 Apple  Security updateurl:https://support.apple.com/en-us/HT212011

Trust: 0.8

title:Apple: macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojaveurl:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=60a51a6d3f600c46241622f208f75bff

Trust: 0.1

sources: VULMON: CVE-2020-27941 // JVNDB: JVNDB-2020-017319

EXTERNAL IDS

db:NVDid:CVE-2020-27941

Trust: 3.4

db:JVNid:JVNVU95288122

Trust: 0.8

db:JVNDBid:JVNDB-2020-017319

Trust: 0.8

db:AUSCERTid:ESB-2020.4404

Trust: 0.6

db:CNNVDid:CNNVD-202012-1048

Trust: 0.6

db:VULHUBid:VHN-372052

Trust: 0.1

db:VULMONid:CVE-2020-27941

Trust: 0.1

sources: VULHUB: VHN-372052 // VULMON: CVE-2020-27941 // JVNDB: JVNDB-2020-017319 // CNNVD: CNNVD-202012-1048 // NVD: CVE-2020-27941

REFERENCES

url:https://support.apple.com/en-us/ht212011

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2020-27941

Trust: 1.4

url:http://jvn.jp/vu/jvnvu95288122/index.html

Trust: 0.8

url:https://www.auscert.org.au/bulletins/esb-2020.4404/

Trust: 0.6

url:https://vigilance.fr/vulnerability/apple-macos-multiple-vulnerabilities-34108

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://support.apple.com/kb/ht212011

Trust: 0.1

sources: VULHUB: VHN-372052 // VULMON: CVE-2020-27941 // JVNDB: JVNDB-2020-017319 // CNNVD: CNNVD-202012-1048 // NVD: CVE-2020-27941

SOURCES

db:VULHUBid:VHN-372052
db:VULMONid:CVE-2020-27941
db:JVNDBid:JVNDB-2020-017319
db:CNNVDid:CNNVD-202012-1048
db:NVDid:CVE-2020-27941

LAST UPDATE DATE

2024-11-23T21:04:31.065000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-372052date:2021-04-13T00:00:00
db:VULMONid:CVE-2020-27941date:2021-04-13T00:00:00
db:JVNDBid:JVNDB-2020-017319date:2022-09-07T06:54:00
db:CNNVDid:CNNVD-202012-1048date:2021-04-08T00:00:00
db:NVDid:CVE-2020-27941date:2024-11-21T05:22:05.623

SOURCES RELEASE DATE

db:VULHUBid:VHN-372052date:2021-04-02T00:00:00
db:VULMONid:CVE-2020-27941date:2021-04-02T00:00:00
db:JVNDBid:JVNDB-2020-017319date:2022-09-07T00:00:00
db:CNNVDid:CNNVD-202012-1048date:2020-12-15T00:00:00
db:NVDid:CVE-2020-27941date:2021-04-02T18:15:16.437