Sign-up

ID

VAR-202104-0205


CVE

CVE-2020-29612


TITLE

Apple macOS patch_encoding_common Out-Of-Bounds Write Privilege Escalation Vulnerability

Trust: 0.7

sources: ZDI: ZDI-21-389

DESCRIPTION

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to execute arbitrary code with system privileges. This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.The specific flaw exists within the AppleIntelKBLGraphics kext. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure

Trust: 1.71

sources: NVD: CVE-2020-29612 // ZDI: ZDI-21-389 // VULHUB: VHN-376360 // VULMON: CVE-2020-29612

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:gteversion:10.15

Trust: 1.0

vendor:applemodel:macosscope:ltversion:11.1.0

Trust: 1.0

vendor:applemodel:mac os xscope:eqversion:10.15.7

Trust: 1.0

vendor:applemodel:mac os xscope:eqversion:10.14.6

Trust: 1.0

vendor:applemodel:macosscope:gteversion:11.0

Trust: 1.0

vendor:applemodel:mac os xscope:ltversion:10.15.7

Trust: 1.0

vendor:applemodel:mac os xscope:ltversion:10.14.6

Trust: 1.0

vendor:applemodel:mac os xscope:gteversion:10.14

Trust: 1.0

vendor:applemodel:macosscope: - version: -

Trust: 0.7

sources: ZDI: ZDI-21-389 // NVD: CVE-2020-29612

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-29612
value: HIGH

Trust: 1.0

ZDI: CVE-2020-29612
value: HIGH

Trust: 0.7

CNNVD: CNNVD-202012-1051
value: HIGH

Trust: 0.6

VULHUB: VHN-376360
value: HIGH

Trust: 0.1

VULMON: CVE-2020-29612
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2020-29612
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.1

VULHUB: VHN-376360
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2020-29612
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

ZDI: CVE-2020-29612
baseSeverity: HIGH
baseScore: 7.8
vectorString: AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.1
impactScore: 6.0
version: 3.0

Trust: 0.7

sources: ZDI: ZDI-21-389 // VULHUB: VHN-376360 // VULMON: CVE-2020-29612 // CNNVD: CNNVD-202012-1051 // NVD: CVE-2020-29612

PROBLEMTYPE DATA

problemtype:CWE-787

Trust: 1.1

sources: VULHUB: VHN-376360 // NVD: CVE-2020-29612

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202012-1051

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202012-1051

PATCH

title:Apple has issued an update to correct this vulnerability.url:https://support.apple.com/en-us/HT212011

Trust: 0.7

title:Apple macOS Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=137006

Trust: 0.6

title:Apple: macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojaveurl:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=60a51a6d3f600c46241622f208f75bff

Trust: 0.1

sources: ZDI: ZDI-21-389 // VULMON: CVE-2020-29612 // CNNVD: CNNVD-202012-1051

EXTERNAL IDS

db:NVDid:CVE-2020-29612

Trust: 2.5

db:ZDIid:ZDI-21-389

Trust: 1.3

db:ZDI_CANid:ZDI-CAN-11615

Trust: 0.7

db:AUSCERTid:ESB-2020.4404

Trust: 0.6

db:CNNVDid:CNNVD-202012-1051

Trust: 0.6

db:VULHUBid:VHN-376360

Trust: 0.1

db:VULMONid:CVE-2020-29612

Trust: 0.1

sources: ZDI: ZDI-21-389 // VULHUB: VHN-376360 // VULMON: CVE-2020-29612 // CNNVD: CNNVD-202012-1051 // NVD: CVE-2020-29612

REFERENCES

url:https://support.apple.com/en-us/ht212011

Trust: 2.5

url:https://www.auscert.org.au/bulletins/esb-2020.4404/

Trust: 0.6

url:https://www.zerodayinitiative.com/advisories/zdi-21-389/

Trust: 0.6

url:https://vigilance.fr/vulnerability/apple-macos-multiple-vulnerabilities-34108

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2020-29612

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/787.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://exchange.xforce.ibmcloud.com/vulnerabilities/193097

Trust: 0.1

sources: ZDI: ZDI-21-389 // VULHUB: VHN-376360 // VULMON: CVE-2020-29612 // CNNVD: CNNVD-202012-1051 // NVD: CVE-2020-29612

CREDITS

ABC Research s.r.o.

Trust: 0.7

sources: ZDI: ZDI-21-389

SOURCES

db:ZDIid:ZDI-21-389
db:VULHUBid:VHN-376360
db:VULMONid:CVE-2020-29612
db:CNNVDid:CNNVD-202012-1051
db:NVDid:CVE-2020-29612

LAST UPDATE DATE

2024-11-23T21:02:44.599000+00:00


SOURCES UPDATE DATE

db:ZDIid:ZDI-21-389date:2021-03-30T00:00:00
db:VULHUBid:VHN-376360date:2021-04-08T00:00:00
db:VULMONid:CVE-2020-29612date:2021-04-08T00:00:00
db:CNNVDid:CNNVD-202012-1051date:2021-04-20T00:00:00
db:NVDid:CVE-2020-29612date:2024-11-21T05:24:18.983

SOURCES RELEASE DATE

db:ZDIid:ZDI-21-389date:2021-03-30T00:00:00
db:VULHUBid:VHN-376360date:2021-04-02T00:00:00
db:VULMONid:CVE-2020-29612date:2021-04-02T00:00:00
db:CNNVDid:CNNVD-202012-1051date:2020-12-15T00:00:00
db:NVDid:CVE-2020-29612date:2021-04-02T18:15:17.293