566 lines
25 KiB
JSON
566 lines
25 KiB
JSON
{
|
|
"containers": {
|
|
"cna": {
|
|
"affected": [
|
|
{
|
|
"product": "watchOS",
|
|
"vendor": "Apple",
|
|
"versions": [
|
|
{
|
|
"lessThan": "7.1",
|
|
"status": "affected",
|
|
"version": "unspecified",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"product": "iOS and iPadOS",
|
|
"vendor": "Apple",
|
|
"versions": [
|
|
{
|
|
"lessThan": "14.2",
|
|
"status": "affected",
|
|
"version": "unspecified",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"product": "tvOS",
|
|
"vendor": "Apple",
|
|
"versions": [
|
|
{
|
|
"lessThan": "14.2",
|
|
"status": "affected",
|
|
"version": "unspecified",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"product": "macOS",
|
|
"vendor": "Apple",
|
|
"versions": [
|
|
{
|
|
"lessThan": "11.0",
|
|
"status": "affected",
|
|
"version": "unspecified",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"product": "macOS",
|
|
"vendor": "Apple",
|
|
"versions": [
|
|
{
|
|
"lessThan": "12.11",
|
|
"status": "affected",
|
|
"version": "unspecified",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"product": "macOS",
|
|
"vendor": "Apple",
|
|
"versions": [
|
|
{
|
|
"lessThan": "14.0",
|
|
"status": "affected",
|
|
"version": "unspecified",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"product": "macOS",
|
|
"vendor": "Apple",
|
|
"versions": [
|
|
{
|
|
"lessThan": "11.5",
|
|
"status": "affected",
|
|
"version": "unspecified",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"product": "macOS",
|
|
"vendor": "Apple",
|
|
"versions": [
|
|
{
|
|
"lessThan": "11.5",
|
|
"status": "affected",
|
|
"version": "unspecified",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution."
|
|
}
|
|
],
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"description": "Processing maliciously crafted web content may lead to arbitrary code execution",
|
|
"lang": "en",
|
|
"type": "text"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"dateUpdated": "2021-05-01T01:06:23.000Z",
|
|
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
|
|
"shortName": "apple"
|
|
},
|
|
"references": [
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211931"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211935"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211934"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211928"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211929"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211930"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211933"
|
|
},
|
|
{
|
|
"name": "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_FULLDISC"
|
|
],
|
|
"url": "http://seclists.org/fulldisclosure/2020/Dec/32"
|
|
},
|
|
{
|
|
"name": "[oss-security] 20210322 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0002",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST"
|
|
],
|
|
"url": "http://www.openwall.com/lists/oss-security/2021/03/22/1"
|
|
},
|
|
{
|
|
"name": "FEDORA-2021-8070916f7a",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_FEDORA"
|
|
],
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EQ3U3VBSOJB46WCO66TEWE5OAXLTU3YW/"
|
|
},
|
|
{
|
|
"name": "DSA-4877",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_DEBIAN"
|
|
],
|
|
"url": "https://www.debian.org/security/2021/dsa-4877"
|
|
},
|
|
{
|
|
"name": "FEDORA-2021-864dc37032",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_FEDORA"
|
|
],
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/"
|
|
},
|
|
{
|
|
"name": "FEDORA-2021-619711d709",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_FEDORA"
|
|
],
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/"
|
|
},
|
|
{
|
|
"name": "GLSA-202104-03",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_GENTOO"
|
|
],
|
|
"url": "https://security.gentoo.org/glsa/202104-03"
|
|
}
|
|
],
|
|
"x_legacyV4Record": {
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "product-security@apple.com",
|
|
"ID": "CVE-2020-27918",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "watchOS",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "7.1"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "iOS and iPadOS",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "14.2"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "tvOS",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "14.2"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "macOS",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "11.0"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "macOS",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "12.11"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "macOS",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "14.0"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "macOS",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "11.5"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "macOS",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "11.5"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "Apple"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Processing maliciously crafted web content may lead to arbitrary code execution"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "https://support.apple.com/en-us/HT211931",
|
|
"refsource": "MISC",
|
|
"url": "https://support.apple.com/en-us/HT211931"
|
|
},
|
|
{
|
|
"name": "https://support.apple.com/en-us/HT211935",
|
|
"refsource": "MISC",
|
|
"url": "https://support.apple.com/en-us/HT211935"
|
|
},
|
|
{
|
|
"name": "https://support.apple.com/en-us/HT211934",
|
|
"refsource": "MISC",
|
|
"url": "https://support.apple.com/en-us/HT211934"
|
|
},
|
|
{
|
|
"name": "https://support.apple.com/en-us/HT211928",
|
|
"refsource": "MISC",
|
|
"url": "https://support.apple.com/en-us/HT211928"
|
|
},
|
|
{
|
|
"name": "https://support.apple.com/en-us/HT211929",
|
|
"refsource": "MISC",
|
|
"url": "https://support.apple.com/en-us/HT211929"
|
|
},
|
|
{
|
|
"name": "https://support.apple.com/en-us/HT211930",
|
|
"refsource": "MISC",
|
|
"url": "https://support.apple.com/en-us/HT211930"
|
|
},
|
|
{
|
|
"name": "https://support.apple.com/en-us/HT211933",
|
|
"refsource": "MISC",
|
|
"url": "https://support.apple.com/en-us/HT211933"
|
|
},
|
|
{
|
|
"name": "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
|
|
"refsource": "FULLDISC",
|
|
"url": "http://seclists.org/fulldisclosure/2020/Dec/32"
|
|
},
|
|
{
|
|
"name": "[oss-security] 20210322 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0002",
|
|
"refsource": "MLIST",
|
|
"url": "http://www.openwall.com/lists/oss-security/2021/03/22/1"
|
|
},
|
|
{
|
|
"name": "FEDORA-2021-8070916f7a",
|
|
"refsource": "FEDORA",
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EQ3U3VBSOJB46WCO66TEWE5OAXLTU3YW/"
|
|
},
|
|
{
|
|
"name": "DSA-4877",
|
|
"refsource": "DEBIAN",
|
|
"url": "https://www.debian.org/security/2021/dsa-4877"
|
|
},
|
|
{
|
|
"name": "FEDORA-2021-864dc37032",
|
|
"refsource": "FEDORA",
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/"
|
|
},
|
|
{
|
|
"name": "FEDORA-2021-619711d709",
|
|
"refsource": "FEDORA",
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/"
|
|
},
|
|
{
|
|
"name": "GLSA-202104-03",
|
|
"refsource": "GENTOO",
|
|
"url": "https://security.gentoo.org/glsa/202104-03"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"adp": [
|
|
{
|
|
"providerMetadata": {
|
|
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"shortName": "CVE",
|
|
"dateUpdated": "2024-08-04T16:25:43.860Z"
|
|
},
|
|
"title": "CVE Program Container",
|
|
"references": [
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211931"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211935"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211934"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211928"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211929"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211930"
|
|
},
|
|
{
|
|
"tags": [
|
|
"x_refsource_MISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://support.apple.com/en-us/HT211933"
|
|
},
|
|
{
|
|
"name": "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_FULLDISC",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://seclists.org/fulldisclosure/2020/Dec/32"
|
|
},
|
|
{
|
|
"name": "[oss-security] 20210322 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0002",
|
|
"tags": [
|
|
"mailing-list",
|
|
"x_refsource_MLIST",
|
|
"x_transferred"
|
|
],
|
|
"url": "http://www.openwall.com/lists/oss-security/2021/03/22/1"
|
|
},
|
|
{
|
|
"name": "FEDORA-2021-8070916f7a",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_FEDORA",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EQ3U3VBSOJB46WCO66TEWE5OAXLTU3YW/"
|
|
},
|
|
{
|
|
"name": "DSA-4877",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_DEBIAN",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://www.debian.org/security/2021/dsa-4877"
|
|
},
|
|
{
|
|
"name": "FEDORA-2021-864dc37032",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_FEDORA",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/"
|
|
},
|
|
{
|
|
"name": "FEDORA-2021-619711d709",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_FEDORA",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/"
|
|
},
|
|
{
|
|
"name": "GLSA-202104-03",
|
|
"tags": [
|
|
"vendor-advisory",
|
|
"x_refsource_GENTOO",
|
|
"x_transferred"
|
|
],
|
|
"url": "https://security.gentoo.org/glsa/202104-03"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"cveMetadata": {
|
|
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
|
|
"assignerShortName": "apple",
|
|
"cveId": "CVE-2020-27918",
|
|
"datePublished": "2020-12-08T21:11:49.000Z",
|
|
"dateReserved": "2020-10-27T00:00:00.000Z",
|
|
"dateUpdated": "2024-08-04T16:25:43.860Z",
|
|
"state": "PUBLISHED"
|
|
},
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.1"
|
|
} |