cbcvebase.
CVE-2013-3954
published 2013-06-05

CVE-2013-3954: The posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not properly validate the data for file actions and port actions, which allows…

PriorityP419medium6.9CVSS 2.0
AVLACMAuNCCICAC
EPSS
0.42%
34.3th percentile
The posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not properly validate the data for file actions and port actions, which allows local users to (1) cause a denial of service (panic) via a size value that is inconsistent with a header count field, or (2) obtain sensitive information from kernel heap memory via a certain size value in conjunction with a crafted buffer.

Affected

53 ranges· showing 25
VendorProductVersion rangeFixed in
appleiphone_os<= 6.1.4—
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.