567 - OS X Kernel UaF due to audit session port failing to correctly account for spoofed no-more-senders notifications - project-zero

Starred by 1 user

Status:	Duplicate
Merged:	issue 553
Owner:	ianbeer@google.com
Closed:	Dec 2015
Cc:	project-...@google.com
Finder-ianbeer Deadline-90 Vendor-Apple Reported-2015-Oct-09 CCProjectZeroMembers Id-629717905 Severity-High Product-OSX-Kernel

OS X Kernel UaF due to audit session port failing to correctly account for spoofed no-more-senders notifications

Project Member Reported by ianbeer@google.com, Oct 9 2015

Back to list

Kernel UaF due to audit session port failing to correctly account for spoofed no-more-senders notifications

Tested on ElCapitan 10.11 (15a284) on MacBookAir 5,2

audit_spoof.c
1.4 KB Download

Project Member Comment 1 by ianbeer@google.com, Oct 9 2015

Labels: Id-629717905 Reported-2015-Oct-09

Project Member Comment 2 by ianbeer@google.com, Dec 20 2015

Mergedinto: 553
Status: Duplicate

Project Member Comment 3 by ianbeer@google.com, Dec 20 2015

This bug was fixed as part of the fixed for CVE-2015-7047 so dup'ing into that issue

Project Member Comment 4 by ianbeer@google.com, Jan 27 2016

Labels: -Restrict-View-Commit

► Sign in to add a comment