多款Apple产品 缓冲区错误漏洞

admin 2022-10-10 14:54:49 CNNVD漏洞 来源:ZONE.CI 全球网 0 阅读模式

漏洞信息详情

多款CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple产品 缓冲区错误漏洞

  • CNNVD编号:CNNVD-202207-2099
  • 危害等级: 中危
  • CVE编号: CVE-2022-32832
  • 漏洞类型: 缓冲区错误
  • 发布时间: 2022-07-20
  • 威胁类型: 本地
  • 更新时间: 2022-09-28
  • 厂        商:
  • 漏洞来源:

漏洞简介

CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iOSCMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iPadOS都是美国苹果(CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple)公司的产品。CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iOS是一套为移动设备所开发的操作系统。CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iPadOS是一套用于iPad平板电脑的操作系统。

CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iOS 15.6之前版本和iPadOS 15.6之前版本存在缓冲区错误漏洞,该漏洞源于APFS中存在边界错误,本地用户可以运行一个特制的程序来触发内存损坏并以root权限执行任意代码。该漏洞允许本地用户在系统上提升权限。

漏洞公告

目前厂商已发布升级补丁以修复漏洞,补丁获取链接:

https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-us/HT213346

参考网址

来源:MISC

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-us/HT213340

来源:MISC

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-us/HT213343

来源:MISC

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-us/HT213344

来源:MISC

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-us/HT213342

来源:MISC

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-us/HT213345

来源:MISC

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-us/HT213346

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple-macOS-12-multiple-vulnerabilities-38873

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2022.3563

来源:support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-us/HT213346

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2022072107

来源:cxsecurity.com

链接:https://cxsecurity.com/cveshow/CVE-2022-32832/

受影响实体

    暂无


补丁

  • 多款CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple产品 缓冲区错误漏洞的修复措施

weinxin
特别声明
本站(ZONE.CI)所有文章仅供技术研究,若将其信息做其他用途,由用户承担全部法律及连带责任,本站不承担任何法律及连带责任,请遵守中华人民共和国安全法.
Anchor 安全漏洞 CNNVD漏洞

Anchor 安全漏洞

漏洞信息详情Anchor 安全漏洞CNNVD编号:CNNVD-202207-2095危害等级: 高危CVE编号:CVE-2022-1766漏洞类型:其他发布时间:2022-07
评论:0   参与:  0