CVE-2005-0975Darwin Kernel vulnerability

2 documents2 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 72.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 2
Latest updateMay 1

Description

Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to cause a denial of service (CPU consumption) via a crafted mach-o header.

CVSS vector

AV:L/AC:L/C:N/I:N/A:PExploitability: 3.9 | Impact: 2.9

Affected Packages3 packages

NVDapple/mac_os_x7 versions+6
NVDapple/mac_os_x_server8 versions+7

Patches

🔴Vulnerability Details

1
GHSA
GHSA-mj88-fhg6-9xxg: Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader2022-05-01