Apple macOS RSA PKCS Private Key channel accessible

Summaryinfo

A vulnerability was found in Apple macOS. It has been rated as problematic. Affected by this issue is some unknown functionality of the component RSA PKCS Private Key Handler. Performing a manipulation results in channel accessible. This vulnerability is cataloged as CVE-2024-23218. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Apple macOS (Operating System) (version unknown). This affects an unknown function of the component RSA PKCS Private Key Handler. The manipulation with an unknown input leads to a channel accessible vulnerability. CWE is classifying the issue as CWE-300. The product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint. This is going to have an impact on availability. The summary by CVE is:

A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, tvOS 17.3, watchOS 10.3. An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the private key.

The weakness was shared 01/23/2024. The advisory is shared at support.apple.com. This vulnerability is uniquely identified as CVE-2024-23218 since 01/12/2024. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 04/02/2026). It is expected to see the exploit prices for this product increasing in the near future.MITRE ATT&CK project uses the attack technique T1557 for this issue.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2024-20737). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Apple

Name

• macOS

License

• commercial

Website

• Vendor: https://www.apple.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion