Apple tvOS up to 13.3.1 WebKit race condition

Summaryinfo

A vulnerability identified as problematic has been detected in Apple tvOS up to 13.3.1. Affected is an unknown function of the component WebKit. The manipulation leads to race condition. This vulnerability is referenced as CVE-2020-3894. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Apple tvOS up to 13.3.1 (Digital Media Player). This issue affects some unknown functionality of the component WebKit. The manipulation with an unknown input leads to a race condition vulnerability. Using CWE to declare the problem leads to CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. Impacted is confidentiality. The summary by CVE is:

A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. An application may be able to read restricted memory.

The weakness was published 03/24/2020 by Sergei Glazunov with Google Project Zero as HT211101 as confirmed advisory (Website). The advisory is shared at support.apple.com. The identification of this vulnerability is CVE-2020-3894. The exploitation is known to be difficult. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available. The advisory points out:

A race condition was addressed with additional validation.

Upgrading to version 13.4 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

Similar entries are available at VDB-152513, VDB-152514, VDB-152515 and VDB-152516. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Digital Media Player

Vendor

• Apple

Name

• tvOS

Version

• 13.3.0
• 13.3.1

License

• commercial

Website

• Vendor: https://www.apple.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion