CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2020-3915 – Apple macOS printtool Daemon Improper Input Validation Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2020-3915
A path handling issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to overwrite arbitrary files. Se abordó un problema de manejo de rutas con una comprobación mejorada. Este problema es corregido en macOS Catalina versión 10.15.4. • https://support.apple.com/kb/HT211100 •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-8696 – cups: stack-buffer-overflow in libcups's asn1_get_packed function
https://notcve.org/view.php?id=CVE-2019-8696
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code. Se abordó un problema de desbordamiento del búfer con un manejo de la memoria mejorada. Este problema se corrigió en macOS Mojave versión 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. • https://support.apple.com/en-us/HT210348 https://access.redhat.com/security/cve/CVE-2019-8696 https://bugzilla.redhat.com/show_bug.cgi?id=1738497 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-121: Stack-based Buffer Overflow •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2020-3898 – cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c
https://notcve.org/view.php?id=CVE-2020-3898
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges. Se abordó un problema de corrupción de la memoria con una comprobación mejorada. Este problema es corregido en macOS Catalina versión 10.15.4. • https://support.apple.com/kb/HT211100 https://access.redhat.com/security/cve/CVE-2020-3898 https://bugzilla.redhat.com/show_bug.cgi?id=1823964 • CWE-20: Improper Input Validation CWE-125: Out-of-bounds Read CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 1CVE-2019-6203
https://notcve.org/view.php?id=CVE-2019-6203
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic. Se abordó un problema lógico con una administración de estado mejorada. Este problema está corregido en iOS versión 12.2, macOS Mojave versión 10.14.4, tvOS versión 12.2. • https://github.com/qingxp9/CVE-2019-6203-PoC https://support.apple.com/HT209599 https://support.apple.com/HT209600 https://support.apple.com/HT209601 •
CVSS: 5.5EPSS: 0%CPEs: 45EXPL: 1CVE-2020-11758
https://notcve.org/view.php?id=CVE-2020-11758
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h. Se detectó un problema en OpenEXR versiones anteriores a 2.4.1. Se presenta una lectura fuera de límites en el archivo ImfOptimizedPixelReading.h. • http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html https://bugs.chromium.org/p/project-zero/issues/detail?id=1987 https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020 https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3 https:// • CWE-125: Out-of-bounds Read •