Lucene search

PRIOn knowledge basePRION:CVE-2023-38600

HistoryJul 27, 2023 - 1:15 a.m.

Code injection

2023-07-2701:15:00

PRIOn knowledge base

www.prio-n.com

code injection

arbitrary code execution

web content processing

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%

JSON

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.

CPENameOperatorVersion
ipadoslt16.6
iphone_oslt16.6
macosge13.0
macoslt13.5
safarilt16.6
tvoslt16.6
watchoslt9.6

Name	Operator	Version
ipados	lt	16.6
iphone_os	lt	16.6
macos	ge	13.0
macos	lt	13.5
safari	lt	16.6
tvos	lt	16.6
watchos	lt	9.6

References

www.openwall.com/lists/oss-security/2023/08/02/1

lists.fedoraproject.org/archives/list/[email protected]/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/

lists.fedoraproject.org/archives/list/[email protected]/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/

security.gentoo.org/glsa/202401-04

support.apple.com/en-us/HT213841

support.apple.com/en-us/HT213843

support.apple.com/en-us/HT213846

support.apple.com/en-us/HT213847

support.apple.com/en-us/HT213848

www.debian.org/security/2023/dsa-5468