CVE-2020-3862

Published: Feb 27, 2020Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service.

Affected (8)

Products: Apple: Icloud, Ipados, Iphone Os, Itunes, Safari, Tvos · Opensuse: Leap

6 products

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Apple Icloud	Before 7.17
Apple Icloud	From 10.0 to 10.8
Apple Ipados	Before 13.3.1
Apple Iphone Os	Before 13.3.1
Apple Itunes	Before 12.10.4
Apple Safari	Before 13.0.5
Apple Tvos	Before 13.3.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.1

References (8)

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html

Source: product-security@apple.com

Mailing ListPatchThird Party Advisory

https://security.gentoo.org/glsa/202003-22

Source: product-security@apple.com

Third Party Advisory

https://support.apple.com/HT210947

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/HT210948

Source: product-security@apple.com

Release NotesVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

https://security.gentoo.org/glsa/202003-22

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/HT210947

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/HT210948

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.