CVE-2013-5145 — Apple Iphone OS vulnerability

CWE-2642 documents2 sources
Severity
6.3MEDIUMNVD
EPSS
0.0%
top 86.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Iphone OS
Timeline
PublishedSep 19
Latest updateMay 17

Description

kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows local users to (1) load or (2) unload kernel extensions via a crafted message.

CVSS vector

AV:L/AC:M/C:N/I:C/A:CExploitability: 3.4 | Impact: 9.2

Affected Packages1 packages

▶NVDapple/iphone_os6.1.4+47

🔴Vulnerability Details

1
GHSA
GHSA-hv3v-gmgw-4c5p: kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows local users to (1) load or (2) un↗2022-05-17
▶
CVE-2013-5145 — Apple Iphone OS vulnerability | cvebase