高危
Apple多款产品RTKit安全绕过漏洞
2024-03-05 19:24:13 公开 ，2026-04-02 19:39:51 更新
- CISA KEV
- 关键漏洞
- 本地
- 无需认证
- CWE Top 25 (2023)
- CWE Top 25 (2024)
- 公开PoC
- CWEs：
- CWE-787 （Out-of-bounds Write）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2024-03-09 13:00:52
风险信息
- CVSS v3 向量
- AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS v3 风险值
- 5.5
- CVSS v3.1 向量
- AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 7.8
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Apple iOS、iPadOS、macOS、tvOS和watchOS RTKit（APPLE专有嵌入式/实时操作系统）组件包含内存损坏漏洞，使具有任意内核读写功能的攻击者能够绕过内核内存保护。
- 修复建议
- APPLE已经发布修复程序。有关修补程序、升级或建议的解决方法信息，请参阅Apple security document HT214081： https://support.apple.com/en-us/HT214081 https://support.apple.com/en-us/HT214082 https://support.apple.com/en-us/HT214084 https://support.apple.com/en-us/HT214086 https://support.apple.com/en-us/HT214088
参考链接
- https://support.apple.com/en-us/HT214081
CVE · Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-23296
- https://github.com/advisories/GHSA-v4rc-hq4f-4cmp
- https://support.apple.com/kb/HT214088
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214084
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214087
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214086
CVE · Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Mar/21
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/25
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/18
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/24
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/26
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/May/11
CVE · Third Party Advisory · Mailing List
- http://seclists.org/fulldisclosure/2024/May/13
CVE · Third Party Advisory · Mailing List
- https://support.apple.com/kb/HT214107
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214100
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214118
CVE · Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Jul/20
CVE · Third Party Advisory · Mailing List
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23296
NVD · US Government Resource
- https://support.apple.com/kb/HT214081
NVD · Vendor Advisory
- https://support.apple.com/en-us/120900
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120881
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120893
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120910
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120882
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120895
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120898
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120883
CVE · Vendor Advisory · Release Notes