SB2022012632 - Multiple vulnerabilities in macOS Catalina

Description

This security bulletin contains information about 5 secuirty vulnerabilities.

1) Buffer overflow (CVE-ID: CVE-2022-22593)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in macOS kernel. A local user or malicious application can trigger buffer overflow and execute arbitrary code with kernel privileges.

2) Out-of-bounds read (CVE-ID: CVE-2022-22579)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a boundary condition in Model I/O when processing STL files. A remote attacker can create a specially crafted STL file, trick the victim into opening it, trigger an out-of-bounds read error and read contents of memory or execute arbitrary code on the system.

3) Security restrictions bypass (CVE-ID: CVE-2022-22583)

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to improper permissions management in PackageKit. A malicious application can access restricted files.

4) Security restrictions bypass (CVE-ID: CVE-2021-30972)

The vulnerability allows a local application to bypass implemented privacy restrictions.

The vulnerability exists due to improper restrictions in TCC. A malicious application can bypass certain Privacy preferences.

5) Security restrictions bypass (CVE-ID: CVE-2021-30946)

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to a logic issue in the Sandbox feature. A malicious application can bypass certain Privacy preferences.

Remediation

Install update from vendor's website.

References

• https://support.apple.com/en-us/HT213056
• https://www.zerodayinitiative.com/advisories/ZDI-22-361/
• https://www.zerodayinitiative.com/advisories/ZDI-22-811/