CVE-2020-9849
CVE-2020-9849
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0. A remote attacker may be able to leak memory.
CVSS 6.5 · Medium · EPSS 2.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
tvos
- Versions
- ≥ unspecified, < 14.0: Affected (custom)
Update to 14.0
watchos
- Versions
- ≥ unspecified, < 7.0: Affected (custom)
Update to 7.0
ios and ipados
- Versions
- ≥ unspecified, < 14.0: Affected (custom)
Update to 14.0
macos
- Versions
- ≥ unspecified, < 11.0: Affected (custom)
Update to 11.0
macos
- Versions
- ≥ unspecified, < 11.5: Affected (custom)
Update to 11.5
macos
- Versions
- ≥ unspecified, < 12.10: Affected (custom)
Update to 12.10
sqlite Ubuntu:16.04:LTS
- Versions
- 2.8.17-12fakesync1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://support.apple.com/en-us/HT211843
- https://support.apple.com/en-us/HT211850
- https://support.apple.com/en-us/HT211844
- https://support.apple.com/en-us/HT211931
- https://support.apple.com/en-us/HT211935
- https://support.apple.com/en-us/HT211952
- http://seclists.org/fulldisclosure/2020/Dec/32
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
- https://nvd.nist.gov/vuln/detail/CVE-2020-9849