CVE-2020-9991

Published: Dic 08, 2020 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2020-30770 Aliases: GSD-2020-9991
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,5
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
MEDIUM 5,0
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: none
Integrity: none
Availability: partial

Description

AI Translation Available

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, tvOS 14.0. A remote attacker may be able to cause a denial of service.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0214
Percentile
0,8th
Updated

EPSS Score Trend (Last 90 Days)

Operating System

Tvos by Apple

Version Range Affected
To 14.0 (exclusive)
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ipados by Apple

Version Range Affected
To 14.0 (exclusive)
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Iphone Os by Apple

Version Range Affected
To 14.0 (exclusive)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mac Os X by Apple

Version Range Affected
To 11.0.1 (exclusive)
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Icloud by Apple

Version Range Affected
From 11.0 (inclusive)
To 11.4 (exclusive)
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Watchos by Apple

Version Range Affected
To 7.0 (exclusive)
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Icloud by Apple

Version Range Affected
To 7.21 (exclusive)
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://seclists.org/fulldisclosure/2020/Dec/32
Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2020/Dec/32
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff043…
https://support.apple.com/en-us/HT211843
https://support.apple.com/en-us/HT211844
https://support.apple.com/en-us/HT211847
https://support.apple.com/en-us/HT211850
https://support.apple.com/en-us/HT211931
https://support.apple.com/kb/HT211846
http://seclists.org/fulldisclosure/2020/Dec/32
Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2020/Dec/32
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff043…
https://support.apple.com/en-us/HT211843
https://support.apple.com/en-us/HT211844
https://support.apple.com/en-us/HT211847
https://support.apple.com/en-us/HT211850
https://support.apple.com/en-us/HT211931
https://support.apple.com/kb/HT211846