APPLE-SA-2020-1-28-4 tvOS 13.3.1
APPLE-SA-2020-1-28-4 tvOS 13.3.1
- Subject: APPLE-SA-2020-1-28-4 tvOS 13.3.1
- From: Apple Product Security via Security-announce <email@hidden>
- Date: Tue, 28 Jan 2020 14:36:42 -0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-2020-1-28-4 tvOS 13.3.1
tvOS 13.3.1 is now available and addresses the following:
Audio
Available for: Apple TV 4K and Apple TV HD
Impact: An application may be able to execute arbitrary code with
system privileges
Description: A memory corruption issue was addressed with improved
memory handling.
CVE-2020-3857: Zhuo Liang of Qihoo 360 Vulcan Team
ImageIO
Available for: Apple TV 4K and Apple TV HD
Impact: Processing a maliciously crafted image may lead to arbitrary
code execution
Description: An out-of-bounds read was addressed with improved input
validation.
CVE-2020-3870
CVE-2020-3878: Samuel Groß of Google Project Zero
IOAcceleratorFamily
Available for: Apple TV 4K and Apple TV HD
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: A memory corruption issue was addressed with improved
memory handling.
CVE-2020-3837: Brandon Azad of Google Project Zero
IPSec
Available for: Apple TV 4K and Apple TV HD
Impact: Loading a maliciously crafted racoon configuration file may
lead to arbitrary code execution
Description: An off by one issue existed in the handling of racoon
configuration files. This issue was addressed through improved bounds
checking.
CVE-2020-3840: @littlelailo
Kernel
Available for: Apple TV 4K and Apple TV HD
Impact: An application may be able to read restricted memory
Description: A validation issue was addressed with improved input
sanitization.
CVE-2020-3875: Brandon Azad of Google Project Zero
Kernel
Available for: Apple TV 4K and Apple TV HD
Impact: An application may be able to read restricted memory
Description: A memory initialization issue was addressed with
improved memory handling.
CVE-2020-3872: Haakon Garseg Mørk of Cognite and Cim Stordal of
Cognite
Kernel
Available for: Apple TV 4K and Apple TV HD
Impact: A malicious application may be able to determine kernel
memory layout
Description: An access issue was addressed with improved memory
management.
CVE-2020-3836: Brandon Azad of Google Project Zero
Kernel
Available for: Apple TV 4K and Apple TV HD
Impact: An application may be able to execute arbitrary code with
kernel privileges
Description: A memory corruption issue was addressed with improved
memory handling.
CVE-2020-3842: Ned Williamson working with Google Project Zero
Kernel
Available for: Apple TV 4K and Apple TV HD
Impact: A malicious application may be able to execute arbitrary code
with system privileges
Description: A type confusion issue was addressed with improved
memory handling.
CVE-2020-3853: Brandon Azad of Google Project Zero
libxpc
Available for: Apple TV 4K and Apple TV HD
Impact: Processing a maliciously crafted string may lead to heap
corruption
Description: A memory corruption issue was addressed with improved
input validation.
CVE-2020-3856: Ian Beer of Google Project Zero
libxpc
Available for: Apple TV 4K and Apple TV HD
Impact: An application may be able to gain elevated privileges
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2020-3829: Ian Beer of Google Project Zero
WebKit
Available for: Apple TV 4K and Apple TV HD
Impact: Processing maliciously crafted web content may lead to
arbitrary code execution
Description: Multiple memory corruption issues were addressed with
improved memory handling.
CVE-2020-3868: Marcin Towalski of Cisco Talos
wifivelocityd
Available for: Apple TV 4K and Apple TV HD
Impact: An application may be able to execute arbitrary code with
system privileges
Description: The issue was addressed with improved permissions logic.
CVE-2020-3838: Dayton Pidhirney (@_watbulb)
Additional recognition
IOSurface
We would like to acknowledge Liang Chen (@chenliang0817) for their
assistance.
Installation note:
Apple TV will periodically check for software updates. Alternatively,
you may manually check for software updates by selecting
"Settings -> System -> Software Update -> Update Software."
To check the current version of software, select
"Settings -> General -> About."
Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEM5FaaFRjww9EJgvRBz4uGe3y0M0FAl4whoIACgkQBz4uGe3y
0M0O1A//SCZ3xER+6ClBQJdJzWwsjmHI/Fwb5lod5uMRYxFx8T+xc0DT1KQV+cM6
HDjMO6vB0m9lc7ftwER09PnBnI8sZTnxfWckZV1LHX1Wss77wTI/thGZMB716rD8
ddUTcvMBwyLoI4qLg/DBXPb5ySshRXjXyoJ+DSbQ74iUssMhMrvP7j1OgdXximiq
Ymjwd9q5gICNmtIPBu/dkx/bIPwgmTGPbDKfIUOPkqD2guxEf1lXTS+XaiYT2dKt
LOYbtz5wVw82462BkV7dW2a0CZtom9NO/ro0h0dbl/QJI6Czpdq1V7oTY+csfm9N
2ouDc6MlxcKwBPncQUfHxXgWgodSG/syR/0gY2AX3YXwsVbGgo8DYdEKuGsB9DVZ
bcvZPWPQl6tvsYw0JlKVzGLzIZiqQq88187lT2omY3AzRYW12+te8Aj2AGNhTyCI
E/1YGwp9RYXNTsWD0Va4pf1a1r8+6F3m1GSkOmXEZRP4+MPu1/HmhCu7+uQXcVvF
fahuZmJ0E4F6k0dkBbI619FuDl41dhhuEqZjkhObLcYYq3Uyrd5qx3Qbw7wj/r68
17Ni/+nAoNf70vu7lxsVth86NWgqbzlTErymZ/jfd3/87NAEPRL8y5fmFZt91AQt
Ah4CGUBhIyRKcNoTBTgqzYUUE8jaQ3/HiAKKgwNboldqbNmQknA=
=ZEol
-----END PGP SIGNATURE-----
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Security-announce mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden