CVE-2023-41979

A race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14. An app may be able to modify protected parts of the file system.
References
Link Resource
http://seclists.org/fulldisclosure/2023/Oct/3 Mailing List Third Party Advisory
https://support.apple.com/en-us/HT213940 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

05 Oct 2023, 13:33

Type Values Removed Values Added
References (MISC) http://seclists.org/fulldisclosure/2023/Oct/3 - (MISC) http://seclists.org/fulldisclosure/2023/Oct/3 - Mailing List, Third Party Advisory

03 Oct 2023, 06:15

Type Values Removed Values Added
References
  • (MISC) http://seclists.org/fulldisclosure/2023/Oct/3 -

28 Sep 2023, 15:36

Type Values Removed Values Added
First Time Apple
Apple macos
References (MISC) https://support.apple.com/en-us/HT213940 - (MISC) https://support.apple.com/en-us/HT213940 - Release Notes, Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.7
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
CWE CWE-362

27 Sep 2023, 15:19

Type Values Removed Values Added
New CVE

Information

Published : 2023-09-27 15:19

Updated : 2024-02-28 20:33


NVD link : CVE-2023-41979

Mitre link : CVE-2023-41979

CVE.ORG link : CVE-2023-41979


JSON object : View

Products Affected

apple

  • macos
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')