CVE-2023-42854

MEDIUM

macOS 12.0-12.7.1 - Denial of Service to Endpoint Security Clients

Title source: llm
STIX 2.1

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to cause a denial-of-service to Endpoint Security clients.

References (9)

Core 9
Core References
Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2023/Oct/21
Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2023/Oct/24
Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2023/Oct/26
Product, Vendor Advisory
https://support.apple.com/en-us/HT213983
Product, Vendor Advisory
https://support.apple.com/en-us/HT213984
Product, Vendor Advisory
https://support.apple.com/en-us/HT213985
Product, Vendor Advisory
https://support.apple.com/kb/HT213983
Product, Vendor Advisory
https://support.apple.com/kb/HT213984
Product, Vendor Advisory
https://support.apple.com/kb/HT213985

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 6.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (1)
apple/macos 12.0 - 12.7.1
Published Oct 25, 2023
Tracked Since Feb 18, 2026