Apple tvOS up to 12.0 Kernel memory corruption

Summaryinfo

A vulnerability has been found in Apple tvOS up to 12.0 and classified as critical. The impacted element is an unknown function of the component Kernel. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2018-4420. The attack can only be executed locally. There is no exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability classified as critical was found in Apple tvOS up to 12.0 (Digital Media Player). Affected by this vulnerability is an unknown part of the component Kernel. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

A memory corruption issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

The bug was discovered 10/30/2018. The weakness was shared 10/29/2018 as HT209194 as confirmed advisory (Website). It is possible to read the advisory at support.apple.com. This vulnerability is known as CVE-2018-4420 since 01/02/2018. Attacking locally is a requirement. A single authentication is necessary for exploitation. The technical details are unknown and an exploit is not publicly available. The advisory points out:

A memory corruption issue was addressed by removing the vulnerable code.

The vulnerability scanner Nessus provides a plugin with the ID 118573 (macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-005)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family MacOS X Local Security Checks and running in the context l. The commercial vulnerability scanner Qualys is able to test this issue with plugin 371291 (Apple macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra Not Installed (HT209193)).

Upgrading to version 12.1 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (118573). The entries VDB-126195, VDB-126166, VDB-126170 and VDB-126172 are related to this item. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Digital Media Player

Vendor

• Apple

Name

• tvOS

Version

• 12.0

License

• commercial

Website

• Vendor: https://www.apple.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion