SB2022012634 - Multiple vulnerabilities in Apple macOS Big Sur

Description

This security bulletin contains information about 7 secuirty vulnerabilities.

1) Out-of-bounds read (CVE-ID: CVE-2021-30960)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the Audio subsystem. A remote attacker can create a specially crafted audio file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

2) Link following (CVE-ID: CVE-2022-22585)

The vulnerability allows a malicious application to gain access to sensitive information.

The vulnerability exists due to incorrect path validation logic for symlinks in iCloud. A malicious application can access user's files.

3) Buffer overflow (CVE-ID: CVE-2022-22587)

The vulnerability allows a malicious application to execute arbitrary code with elevated privileges.

The vulnerability exists due to a boundary error within the IOMobileFrameBuffer subsystem. A malicious application can trigger buffer overflow and execute arbitrary code with kernel privileges.

Note, the vulnerability is being actively exploited in the wild.

4) Buffer overflow (CVE-ID: CVE-2022-22593)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in macOS kernel. A local user or malicious application can trigger buffer overflow and execute arbitrary code with kernel privileges.

5) Out-of-bounds read (CVE-ID: CVE-2022-22579)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a boundary condition in Model I/O when processing STL files. A remote attacker can create a specially crafted STL file, trick the victim into opening it, trigger an out-of-bounds read error and read contents of memory or execute arbitrary code on the system.

6) Security restrictions bypass (CVE-ID: CVE-2022-22583)

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to improper permissions management in PackageKit. A malicious application can access restricted files.

7) Security restrictions bypass (CVE-ID: CVE-2021-30972)

The vulnerability allows a local application to bypass implemented privacy restrictions.

The vulnerability exists due to improper restrictions in TCC. A malicious application can bypass certain Privacy preferences.

Remediation

Install update from vendor's website.

References

• https://support.apple.com/en-us/HT213055