2 lines
6.3 KiB
JSON
2 lines
6.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"17.4","status":"affected","version":"0","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"14.4","status":"affected","version":"0","versionType":"custom"}]},{"product":"tvOS","vendor":"Apple","versions":[{"lessThan":"17.4","status":"affected","version":"0","versionType":"custom"}]},{"product":"watchOS","vendor":"Apple","versions":[{"lessThan":"10.4","status":"affected","version":"0","versionType":"custom"}]}],"source":"product-security@apple.com"},{"affectedData":[{"cpes":["cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"tvos","vendor":"apple","versions":[{"lessThan":"17.4","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"macos","vendor":"apple","versions":[{"lessThan":"14.4","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"watchos","vendor":"apple","versions":[{"lessThan":"10.4","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"iphone_os","vendor":"apple","versions":[{"lessThan":"17.4","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"ipad_os","vendor":"apple","versions":[{"lessThan":"17.4","status":"affected","version":"0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*","matchCriteriaId":"CE5413B9-A1A8-499F-B047-163908202E69","versionEndExcluding":"17.4","vulnerable":true},{"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"BCB4911E-7824-4C34-916D-88110CB415EB","versionEndExcluding":"17.4","vulnerable":true},{"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","matchCriteriaId":"73160D1F-755B-46D2-969F-DF8E43BB1099","versionEndExcluding":"14.4","versionStartIncluding":"14.0","vulnerable":true},{"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","matchCriteriaId":"BB6BA6CB-001B-4440-A9AE-473F5722F8E0","versionEndExcluding":"17.4","vulnerable":true},{"criteria":"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*","matchCriteriaId":"5547F484-4E4B-4961-BAF8-F891D50BB4B6","versionEndExcluding":"10.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges."},{"lang":"es","value":"El problema se solucionó mejorando el manejo de la memoria. Este problema se solucionó en tvOS 17.4, iOS 17.4 y iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. Es posible que una aplicación pueda ejecutar código arbitrario fuera de su zona de pruebas o con ciertos privilegios elevados."}],"id":"CVE-2024-0258","lastModified":"2026-06-17T06:53:06.510","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":6.0,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.5,"impactScore":6.0,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0258","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-04-11T04:01:22.658760Z","version":"2.0.3"}}]},"published":"2024-03-08T02:15:47.293","references":[{"source":"product-security@apple.com","url":"https://support.apple.com/en-us/120881"},{"source":"product-security@apple.com","url":"https://support.apple.com/en-us/120882"},{"source":"product-security@apple.com","url":"https://support.apple.com/en-us/120893"},{"source":"product-security@apple.com","url":"https://support.apple.com/en-us/120895"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://seclists.org/fulldisclosure/2024/Mar/21"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://seclists.org/fulldisclosure/2024/Mar/24"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://seclists.org/fulldisclosure/2024/Mar/25"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT214081"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT214084"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT214086"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT214088"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://support.apple.com/kb/HT214081"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://support.apple.com/kb/HT214084"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://support.apple.com/kb/HT214086"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://support.apple.com/kb/HT214088"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"},{"description":[{"lang":"en","value":"CWE-284"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|