CVE-2018-4413 – Apple macOS sysctl_procargsx Uninitialized Buffer Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2018-4413
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1. Un problema de inicialización de memoria se abordó con una gestión de memoria mejorada. Este problema afectaba a iOS en versiones anteriores a la 12.1, macOS Mojave en versiones anteriores a la 10.14.1, tvOS en versiones anteriores a la 12.1, watchOS en versiones anteriores a la 5.1. This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. • https://support.apple.com/kb/HT209192 https://support.apple.com/kb/HT209193 https://support.apple.com/kb/HT209194 https://support.apple.com/kb/HT209195 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2018-4337
https://notcve.org/view.php?id=CVE-2018-4337
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. Un problema de corrupción de memoria se abordó con una gestión de memoria mejorada. Este problema afectaba a iOS en versiones anteriores a la 12, macOS Mojave en versiones anteriores a la 10.14, tvOS en versiones anteriores a la 12 y watchOS en versiones anteriores a la 5. • https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209107 https://support.apple.com/kb/HT209108 https://support.apple.com/kb/HT209139 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2018-4360
https://notcve.org/view.php?id=CVE-2018-4360
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7. Se abordaron múltiples problemas de corrupción de memoria con una gestión de memoria mejorada. El problema afectaba a iOS en versiones anteriores a la 12, tvOS en versiones anteriores a la 12, Safari en versiones anteriores a la 12, iTunes para Windows en versiones anteriores a la 12.9 y iCloud para Windows en versiones anteriores a la 7.7. • https://devcraft.io/2019/02/19/cve-2018-4360-webkit-information-leakage-with-dommatrixinvertself.html https://github.com/WebKit/webkit/commit/a0b0e01648892b0bb60a01aca619eec85eb27f7a https://support.apple.com/kb/HT209106 https://support.apple.com/kb/HT209107 https://support.apple.com/kb/HT209109 https://support.apple.com/kb/HT209140 https://support.apple.com/kb/HT209141 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2018-4207
https://notcve.org/view.php?id=CVE-2018-4207
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks. En iOS en versiones anteriores a la 11.3, Safari en versiones anteriores a la 11.1, iCloud para Windows en versiones anteriores a la 7.4, tvOS en versiones anteriores a la 11.3, watchOS en versiones anteriores a la 4.3 e iTunes en versiones anteriores a la 12.7.4 para Windows, una interacción inesperada provoca un fallo ASSERT. Este problema se abordó mediante la mejora de las comprobaciones. • https://security.gentoo.org/glsa/201812-04 https://support.apple.com/HT208693%2C https://support.apple.com/HT208694 https://support.apple.com/HT208695%2C https://support.apple.com/HT208696%2C https://support.apple.com/HT208697%2C https://support.apple.com/HT208698%2C https://usn.ubuntu.com/3781-1 • CWE-20: Improper Input Validation •
CVE-2018-4212
https://notcve.org/view.php?id=CVE-2018-4212
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks. En iOS en versiones anteriores a la 11.3, Safari en versiones anteriores a la 11.1, iCloud para Windows en versiones anteriores a la 7.4, tvOS en versiones anteriores a la 11.3, watchOS en versiones anteriores a la 4.3 e iTunes en versiones anteriores a la 12.7.4 para Windows, una interacción inesperada provoca un fallo ASSERT. Este problema se abordó mediante la mejora de las comprobaciones. • https://security.gentoo.org/glsa/201812-04 https://support.apple.com/HT208693%2C https://support.apple.com/HT208694 https://support.apple.com/HT208695%2C https://support.apple.com/HT208696%2C https://support.apple.com/HT208697%2C https://support.apple.com/HT208698%2C https://usn.ubuntu.com/3781-1 •