Lucene search
HistorySep 23, 2022 - 7:15 p.m.
CVE-2022-32799
bounds checking
information leakage
security update
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
52.6%
An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Monterey 12.5. A user in a privileged network position may be able to leak sensitive information.
Affected configurations
Node
applemac_os_xMatch10.15.7security_update_2020-001
ORapplemac_os_xMatch10.15.7security_update_2021-001
ORapplemac_os_xMatch10.15.7security_update_2021-002
ORapplemac_os_xMatch10.15.7security_update_2021-003
ORapplemac_os_xMatch10.15.7security_update_2021-004
ORapplemac_os_xMatch10.15.7security_update_2021-005
ORapplemac_os_xMatch10.15.7security_update_2021-006
ORapplemac_os_xMatch10.15.7security_update_2021-007
ORapplemac_os_xMatch10.15.7security_update_2021-008
ORapplemac_os_xMatch10.15.7security_update_2022-001
ORapplemac_os_xMatch10.15.7security_update_2022-002
ORapplemac_os_xMatch10.15.7security_update_2022-003
ORapplemacosRange<10.15.7
ORapplemacosRange12.0–12.5
ORapplemacosMatch10.15.7-
ORapplemacosMatch10.15.7security_update_2022-004
Related
cvelist
cvelist
CVE-2022-32799
2022-09-23 18:59:46
cve
cve
CVE-2022-32799
2022-09-23 19:15:12
prion
prion
Design/Logic Flaw
2022-09-23 19:15:00
nessus
nessus
macOS 10.15.x < Catalina Security Update 2022-005 Catalina (HT213343)
2022-07-22 00:00:00
macOS 12.x < 12.5 Multiple Vulnerabilities (HT213345)
2022-08-19 00:00:00
openvas
openvas
Apple Mac OS X Security Update (HT213343)
2022-07-22 00:00:00
Apple Mac OS X Security Update (HT213345)
2022-07-22 00:00:00
apple
apple
About the security content of Security Update 2022-005 Catalina
2022-07-20 00:00:00
About the security content of macOS Monterey 12.5
2022-07-20 00:00:00
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
52.6%
Related for NVD:CVE-2022-32799