CVE-2013-3951

Description

sys/openbsd/stack_protector.c in libc in Apple iOS 6.1.3 and Mac OS X 10.8.x does not properly parse the Apple strings employed in the user-space stack-cookie implementation, which allows local users to bypass cookie randomization by executing a program with a call-path beginning with the stack-guard= substring, as demonstrated by an iOS untethering attack or an attack against a setuid Mac OS X program.

Risk Information

Base Score

6.2

MODERATE

Vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.061

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.6 Update	Mac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.6 Combo Update	Mac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.5 Update	Mac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.5 Combo Update	Mac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.4 Update	Mac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.4 Combo Update	Mac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.3 Update	Mac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.2 Update	Mac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.1 Update	Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-600753	OS X El Capitan 10.11.6 Update
PATCH-600754	OS X El Capitan 10.11.6 Combo Update
PATCH-600753	OS X El Capitan 10.11.6 Update
PATCH-600754	OS X El Capitan 10.11.6 Combo Update
PATCH-600753	OS X El Capitan 10.11.6 Update
PATCH-600754	OS X El Capitan 10.11.6 Combo Update
PATCH-600753	OS X El Capitan 10.11.6 Update
PATCH-600753	OS X El Capitan 10.11.6 Update
PATCH-600753	OS X El Capitan 10.11.6 Update

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234