Apple iOS/iPadOS up to 13.3.0 Kernel race condition

Summaryinfo

A vulnerability, which was classified as problematic, was found in Apple iOS and iPadOS up to 13.3.0. Impacted is an unknown function of the component Kernel. Executing a manipulation can lead to race condition. This vulnerability appears as CVE-2020-3831. The attack requires local access. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability has been found in Apple iOS and iPadOS up to 13.3.0 (Smartphone Operating System) and classified as critical. This vulnerability affects some unknown functionality of the component Kernel. The manipulation with an unknown input leads to a race condition vulnerability. The CWE definition for the vulnerability is CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

A race condition was addressed with improved locking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. An application may be able to execute arbitrary code with kernel privileges.

The weakness was presented 01/28/2020 with 360 Nirvan Team as HT210918 as confirmed advisory (Website). The advisory is shared for download at support.apple.com. This vulnerability was named CVE-2020-3831. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 02/28/2020). It is expected to see the exploit prices for this product increasing in the near future. The advisory points out:

A race condition was addressed with improved locking.

Upgrading to version 13.3.1 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

See VDB-150616, VDB-150617, VDB-150618 and VDB-150619 for similar entries. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Smartphone Operating System

Vendor

• Apple

Name

• iOS
• iPadOS

Version

• 13.0
• 13.1
• 13.2
• 13.3.0

License

• commercial

Website

• Vendor: https://www.apple.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion