CVE-2023-40400
published 2023-09-27CVE-2023-40400: This issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. A remote user may cause an…
PriorityP353critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.52%
71.7th percentile
This issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. A remote user may cause an unexpected app termination or arbitrary code execution.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_16.6_and_ipados | — | — |
| apple | ios_17_and_ipados | — | — |
| apple | ipados | < 16.6 | 16.6 |
| apple | iphone_os | < 16.6 | 16.6 |
| apple | macos | < 14.0 | 14.0 |
| apple | macos_sonoma | — | — |
| apple | tvos | < 17.0 | 17.0 |
| apple | tvos | — | — |
| apple | watchos | < 10.0 | 10.0 |
| apple | watchos | — | — |
| debian | libpcap | < libpcap 1.10.5-1 (forky) | libpcap 1.10.5-1 (forky) |
| tcpdump | libpcap | < 1.10.5 | 1.10.5 |
| tcpdump | libpcap | >= 0 < 1.10.5-1 | 1.10.5-1 |
| tcpdump | libpcap | >= 0 < 1.10.5-1 | 1.10.5-1 |
| the_tcpdump_group | libpcap | — | — |
| the_tcpdump_group | libpcap | — | — |
| the_tcpdump_group | libpcap | 1.10.x – 1.10.4 | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian9.8LOW
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libpcap: Double Free in libcap
vendor_redhat·2024-08-31·CVSS 9.8
CVE-2023-7256 [CRITICAL] CWE-415 libpcap: Double Free in libcap
libpcap: Double Free in libcap
In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.
A vulnerability was found in libpcap. During the setup of a remote packet capture, the internal sock_initaddress() function calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function as to whether freeaddr
Apple
CVE-2023-40400: macOS Sonoma 14
vendor_apple·2023-09-26·CVSS 9.8
CVE-2023-40400 [CRITICAL] CVE-2023-40400: macOS Sonoma 14
Apple Security Update: About the security content of macOS Sonoma 14
Product: macOS Sonoma
Version: 14
CVE: CVE-2023-40400
Component: LaunchServices
Impact: An app may bypass Gatekeeper checks
Description: A logic issue was addressed with improved checks.
Apple
CVE-2023-40400: watchOS 10
vendor_apple·2023-09-18·CVSS 9.8
CVE-2023-40400 [CRITICAL] CVE-2023-40400: watchOS 10
Apple Security Update: About the security content of watchOS 10
Product: watchOS
Version: 10
CVE: CVE-2023-40400
Component: Kernel
Impact: An app may be able to access sensitive user data
Description: A permissions issue was addressed with improved validation.
Apple
CVE-2023-40400: iOS 17 and iPadOS 17
vendor_apple·2023-09-18·CVSS 9.8
CVE-2023-40400 [CRITICAL] CVE-2023-40400: iOS 17 and iPadOS 17
Apple Security Update: About the security content of iOS 17 and iPadOS 17
Product: iOS 17 and iPadOS
Version: 17
CVE: CVE-2023-40400
Component: Kernel
Impact: A remote user may be able to cause kernel code execution
Description: A type confusion issue was addressed with improved checks.
Apple
CVE-2023-40400: tvOS 17
vendor_apple·2023-09-18·CVSS 9.8
CVE-2023-40400 [CRITICAL] CVE-2023-40400: tvOS 17
Apple Security Update: About the security content of tvOS 17
Product: tvOS
Version: 17
CVE: CVE-2023-40400
Component: Kernel
Impact: An app may be able to access sensitive user data
Description: A permissions issue was addressed with improved validation.
Apple
CVE-2023-40400: iOS 16.6 and iPadOS 16.6
vendor_apple·2023-07-24·CVSS 9.8
CVE-2023-40400 [CRITICAL] CVE-2023-40400: iOS 16.6 and iPadOS 16.6
Apple Security Update: About the security content of iOS 16.6 and iPadOS 16.6
Product: iOS 16.6 and iPadOS
Version: 16.6
CVE: CVE-2023-40400
Component: Kernel
Impact: A remote user may be able to cause a denial-of-service
Description: The issue was addressed with improved checks.
Debian
CVE-2023-7256: libpcap - In affected libpcap versions during the setup of a remote packet capture the int...
vendor_debian·2023·CVSS 9.8
CVE-2023-7256 [CRITICAL] CVE-2023-7256: libpcap - In affected libpcap versions during the setup of a remote packet capture the int...
In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 1.10.5-1)
sid: resolved (fixed in 1.10.5-1)
trixie: resolved (fixed in 1.10.5-1)
GHSA
GHSA-7m22-9mw3-j4pp: In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly fre
ghsa_unreviewed·2024-08-31·CVSS 9.8
CVE-2023-7256 [CRITICAL] CWE-415 GHSA-7m22-9mw3-j4pp: In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly fre
In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.
OSV
CVE-2023-7256: In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly fre
osv·2024-08-31·CVSS 9.8
CVE-2023-7256 [CRITICAL] CVE-2023-7256: In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly fre
In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.
GHSA
GHSA-6m3p-g8r6-fxvf: This issue was addressed with improved checks
ghsa_unreviewed·2023-09-27
CVE-2023-40400 [CRITICAL] GHSA-6m3p-g8r6-fxvf: This issue was addressed with improved checks
This issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. A remote user may cause an unexpected app termination or arbitrary code execution.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://seclists.org/fulldisclosure/2023/Oct/10http://seclists.org/fulldisclosure/2023/Oct/3http://seclists.org/fulldisclosure/2023/Oct/8http://seclists.org/fulldisclosure/2023/Oct/9https://support.apple.com/en-us/HT213936https://support.apple.com/en-us/HT213937https://support.apple.com/en-us/HT213938https://support.apple.com/en-us/HT213940https://support.apple.com/kb/HT213841http://seclists.org/fulldisclosure/2023/Oct/10http://seclists.org/fulldisclosure/2023/Oct/3http://seclists.org/fulldisclosure/2023/Oct/8http://seclists.org/fulldisclosure/2023/Oct/9https://support.apple.com/en-us/HT213936https://support.apple.com/en-us/HT213937https://support.apple.com/en-us/HT213938https://support.apple.com/en-us/HT213940https://support.apple.com/kb/HT213841https://support.apple.com/kb/HT213936https://support.apple.com/kb/HT213937https://support.apple.com/kb/HT213938https://support.apple.com/kb/HT213940
2023-09-27
Published