Vulnerability CVE-2020-9926 - CERT Civis.Net

Vulnerability Name:

CVE-2020-9926 (CCN-199338)

Assigned:

2020-07-15

Published:

2020-07-15

Updated:

2021-04-08

Summary:

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, iCloud for Windows 7.20, macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

CVSS v3 Severity:

7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

7.8 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
6.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.8 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2020-9926

Source: XF
Type: UNKNOWN
apple-macos-cve20209926-code-exec(199338)

Source: MISC
Type: Vendor Advisory
https://support.apple.com/en-us/HT211288

Source: CCN
Type: Apple security document HT211289
About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra

Source: MISC
Type: Vendor Advisory
https://support.apple.com/en-us/HT211289

Source: MISC
Type: Vendor Advisory
https://support.apple.com/en-us/HT211290

Source: MISC
Type: Vendor Advisory
https://support.apple.com/en-us/HT211291

Source: MISC
Type: Vendor Advisory
https://support.apple.com/en-us/HT211295

Vulnerable Configuration:

Configuration 1:

cpe:/a:apple:icloud:*:*:*:*:*:windows:*:* (Version < 7.20)

OR cpe:/o:apple:ipados:*:*:*:*:*:*:*:* (Version < 13.6)

OR cpe:/o:apple:iphone_os:*:*:*:*:*:*:*:* (Version < 13.6)

OR cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:* (Version < 10.13.6)

OR cpe:/o:apple:mac_os_x:10.13.6:-:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2018-002:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2018-003:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-003:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-004:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-005:*:*:*:*:*:*

OR cpe:/o:apple:tvos:*:*:*:*:*:*:*:* (Version < 13.4.8)

OR cpe:/o:apple:watchos:*:*:*:*:*:*:*:* (Version < 6.2.8)

OR cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:* (Version >= 10.14 and < 10.14.6)

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:* (Version >= 10.15 and < 10.15.6)

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2020-001:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2020-002:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2020-003:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:supplemental_update:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-007:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-006:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*

Configuration CCN 1:

cpe:/o:apple:ios:13.5.1:*:*:*:*:*:*:*

OR cpe:/o:apple:macos_catalina:10.15.5:*:*:*:*:*:*:*

OR cpe:/o:apple:watchos:6.2.7:*:*:*:*:*:*:*

OR cpe:/o:apple:tvos:13.4.7:*:*:*:*:*:*:*

OR cpe:/o:apple:ipados:13.5.1:*:*:*:*:*:*:*

OR cpe:/a:apple:icloud:7.19:*:*:*:*:windows:*:*

Denotes that component is vulnerable