CVE-2023-40385

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iPadOS 17. A remote attacker may be able to view leaked DNS queries with Private Relay turned on.
References
Link Resource
https://support.apple.com/en-us/HT213938 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213940 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213941 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213938 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213940 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213941 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:19

Type Values Removed Values Added
References () https://support.apple.com/en-us/HT213938 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT213938 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213940 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT213940 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213941 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT213941 - Release Notes, Vendor Advisory

18 Jan 2024, 14:32

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
First Time Apple
Apple iphone Os
Apple macos
Apple ipados
Apple safari
References () https://support.apple.com/en-us/HT213940 - () https://support.apple.com/en-us/HT213940 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213938 - () https://support.apple.com/en-us/HT213938 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213941 - () https://support.apple.com/en-us/HT213941 - Release Notes, Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5

10 Jan 2024, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-10 22:15

Updated : 2024-11-21 08:19


NVD link : CVE-2023-40385

Mitre link : CVE-2023-40385

CVE.ORG link : CVE-2023-40385


JSON object : View

Products Affected

apple

  • ipados
  • iphone_os
  • safari
  • macos