VulnerabilityModified
CVE-2013-0964
The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a…
LOW 3.6EPSS 0.63%
Does this matter?
Lower severity and a low EPSS score (0.63%). Track it; it rarely justifies an emergency change on its own.
Description
The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.
- CVSS 2.0
- 3.6 LOWAV:L/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 0.63% probability · 48th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- apple/tvos · apple/iphone os
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.htmlVendor Advisory
- http://osvdb.org/89659
- http://support.apple.com/kb/HT5642Vendor Advisory
- http://support.apple.com/kb/HT5643Vendor Advisory
- http://www.securityfocus.com/bid/57595
- http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.htmlVendor Advisory
- http://osvdb.org/89659
- http://support.apple.com/kb/HT5642Vendor Advisory
- http://support.apple.com/kb/HT5643Vendor Advisory
- http://www.securityfocus.com/bid/57595
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.