2 lines
7.5 KiB
JSON
2 lines
7.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"14.4","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"11.2","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"7.3","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"14.4","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"product-security@apple.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*","matchCriteriaId":"17AAEA98-4C05-496E-81A7-AC031FCDDDA5","versionEndExcluding":"14.4","vulnerable":true},{"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"062166D7-2444-4022-B7E4-13884C43EDCA","versionEndExcluding":"14.4","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"6DE2B03F-94EE-4E32-B366-FE31A7031403","versionEndExcluding":"10.14.6","versionStartIncluding":"10.14","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"DB8A73F8-3074-4B32-B9F6-343B6B1988C5","versionEndExcluding":"10.15.7","versionStartIncluding":"10.15","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*","matchCriteriaId":"693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*","matchCriteriaId":"A369D48B-6A0A-47AE-9513-D5E2E6F30931","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*","matchCriteriaId":"510F8317-94DA-498E-927A-83D5F41AF54A","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*","matchCriteriaId":"0D5D1970-6D2A-42CA-A203-42023D71730D","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*","matchCriteriaId":"C68AE52B-5139-40A4-AE9A-E752DBF07D1B","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*","matchCriteriaId":"0FD3467D-7679-479F-9C0B-A93F7CD0929D","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*","matchCriteriaId":"D4C6098E-EDBD-4A85-8282-B2E9D9333872","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*","matchCriteriaId":"518BB47B-DD76-4E8C-9F10-7EBC1E146191","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*","matchCriteriaId":"63940A55-D851-46EB-9668-D82BEFC1FE95","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*","matchCriteriaId":"68C7A97A-3801-44FA-96CA-10298FA39883","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*","matchCriteriaId":"6D69914D-46C7-4A0E-A075-C863C1692D33","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*","matchCriteriaId":"9CDB4476-B521-43E4-A129-8718A8E0A8CD","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*","matchCriteriaId":"2C88BD98-46F5-447F-963A-FB9B167E31BE","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*","matchCriteriaId":"C7A0615B-D958-4BBF-B53F-AA839A0FE845","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*","matchCriteriaId":"A654B8A2-FC30-4171-B0BB-366CD7ED4B6A","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*","matchCriteriaId":"C1C795B9-E58D-467C-83A8-2D45C792292F","vulnerable":true},{"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","matchCriteriaId":"9B0973F4-D921-4060-9384-43D176F26967","versionEndExcluding":"11.2","versionStartIncluding":"11.0","vulnerable":true},{"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","matchCriteriaId":"7320CF7C-3750-4CAA-8B7C-CAFC7E65354A","versionEndExcluding":"14.4","vulnerable":true},{"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","matchCriteriaId":"9AA4C59B-EC23-4723-9DFF-412938209DE5","versionEndExcluding":"7.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service."},{"lang":"es","value":"Se presentó un problema de lectura fuera de límites en el curl. Este problema es abordado con la mejora una comprobación de límites. Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4. El procesamiento de una imagen diseñada maliciosamente puede ser capaz de causar una denegación de servicio."}],"id":"CVE-2021-1778","lastModified":"2026-06-17T03:32:32.603","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-04-02T18:15:21.123","references":[{"source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212146"},{"source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212147"},{"source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212148"},{"source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212149"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212146"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212147"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212148"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212149"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-125"}],"source":"nvd@nist.gov","type":"Primary"}]}
|