阿里云漏洞库

CVE编号

CVE-2023-42916

利用情况

暂无

补丁情况

官方补丁

披露时间

2023-12-01

通过改进的输入验证解决了一次越界读取漏洞。此问题已在iOS 17.1.2和iPadOS 17.1.2、macOS Sonoma 14.1.2、Safari 17.1.2中修复。处理网页内容可能泄露敏感信息。据报告，此问题可能已被针对iOS 16.7.1之前的版本进行了利用。

"将组件 safari 升级至 17.1.2 及以上版本"
"将组件 ipados 升级至 17.1.2 及以上版本"
"将组件 iphone_os 升级至 17.1.2 及以上版本"
"将组件 macos 升级至 14.1.2 及以上版本"

参考链接
http://seclists.org/fulldisclosure/2023/Dec/12
http://seclists.org/fulldisclosure/2023/Dec/13
http://seclists.org/fulldisclosure/2023/Dec/3
http://seclists.org/fulldisclosure/2023/Dec/4
http://seclists.org/fulldisclosure/2023/Dec/5
http://seclists.org/fulldisclosure/2023/Dec/8
http://seclists.org/fulldisclosure/2024/Jan/35
http://www.openwall.com/lists/oss-security/2023/12/05/1
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedorapr...
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedorapr...
https://security.gentoo.org/glsa/202401-04
https://support.apple.com/en-us/HT214031
https://support.apple.com/en-us/HT214032
https://support.apple.com/en-us/HT214033
https://www.debian.org/security/2023/dsa-5575

CWE-ID	漏洞类型
CWE-125	跨界内存读