Apple iOS up to 12.1.4 Kernel out-of-bounds

Summaryinfo

A vulnerability was found in Apple iOS up to 12.1.4. It has been rated as critical. This impacts an unknown function of the component Kernel. The manipulation leads to out-of-bounds. This vulnerability is documented as CVE-2019-6207. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Apple iOS up to 12.1.4 (Smartphone Operating System) and classified as critical. This issue affects an unknown function of the component Kernel. The manipulation with an unknown input leads to a out-of-bounds vulnerability. Using CWE to declare the problem leads to CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout.

The bug was discovered 03/25/2019. The weakness was released 03/25/2019 with Qihoo 360 as HT209599 as confirmed advisory (Website). It is possible to read the advisory at support.apple.com. The identification of this vulnerability is CVE-2019-6207 since 01/11/2019. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 06/10/2024). It is expected to see the exploit prices for this product increasing in the near future. The advisory points out:

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation.

The commercial vulnerability scanner Qualys is able to test this issue with plugin 371712 (Apple macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra Not Installed (APPLE-SA-2019-3-25-2)).

Upgrading to version 12.2 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

Entries connected to this vulnerability are available at VDB-132233, VDB-132234, VDB-132235 and VDB-132236. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Smartphone Operating System

Vendor

• Apple

Name

• iOS

Version

• 12.1.0
• 12.1.1
• 12.1.2
• 12.1.3
• 12.1.4

License

• commercial

Website

• Vendor: https://www.apple.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion