CVE-2013-3952
Mac OS X 10.8.x - KASLR Bypass via PROC_PIDFDPIPEINFO Pipe Info Disclosure
Title source: llmDescription
The fill_pipeinfo function in bsd/kern/sys_pipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protection mechanism via the PROC_PIDFDPIPEINFO option to the proc_info system call for a kernel pipe handle.
References (2)
Core 2
Core References
Various Sources x_refsource_misc
http://www.syscan.org/index.php/sg/program/day/2
Scores
EPSS
0.0038
EPSS Percentile
30.2%
Details
CWE
CWE-264
Status
published
Products (5)
apple/mac_os_x
10.8.0
apple/mac_os_x
10.8.1
apple/mac_os_x
10.8.2
apple/mac_os_x
10.8.3
apple/mac_os_x
10.8.4
Published
Jun 05, 2013
Tracked Since
Feb 18, 2026