Apple tvOS up to 12.0 Kernel memory corruption

Summaryinfo

A vulnerability was found in Apple tvOS up to 12.0. It has been classified as critical. This impacts an unknown function of the component Kernel. Performing a manipulation results in memory corruption. This vulnerability is identified as CVE-2018-4419. The attack is only possible with local access. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as critical, was found in Apple tvOS up to 12.0 (Digital Media Player). This affects an unknown code block of the component Kernel. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

The bug was discovered 10/30/2018. The weakness was released 10/29/2018 as HT209194 as confirmed advisory (Website). The advisory is shared at support.apple.com. This vulnerability is uniquely identified as CVE-2018-4419 since 01/02/2018. An attack has to be approached locally. The requirement for exploitation is a authentication. Neither technical details nor an exploit are publicly available. The advisory points out:

A memory corruption issue was addressed with improved memory handling.

The vulnerability scanner Nessus provides a plugin with the ID 118573 (macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-005)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family MacOS X Local Security Checks and running in the context l. The commercial vulnerability scanner Qualys is able to test this issue with plugin 371291 (Apple macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra Not Installed (HT209193)).

Upgrading to version 12.1 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (118573). Entries connected to this vulnerability are available at VDB-126195, VDB-126166, VDB-126170 and VDB-126172. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Digital Media Player

Vendor

• Apple

Name

• tvOS

Version

• 12.0

License

• commercial

Website

• Vendor: https://www.apple.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion