CVE-2020-10001

EPSS 0.09%
Published 02.04.2021 18:15:14
Last modified 21.11.2024 04:54:37
Source product-security@apple.com
Teams watchlist Login
Open Login

An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to read restricted memory.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ macOS X Version < 11.1.0

Debian ≫ Debian Linux Version9.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.09%	0.266

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://lists.debian.org/debian-lts-announce/2021/10/msg00027.html

Third Party Advisory

Mailing List

https://support.apple.com/en-us/HT212011

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-10001

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-10001

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-10001

EUVD