Apple macOS CVE-2018-4083 Memory Corruption Vulnerability

Bugtraq ID:	103330
Class:	Unknown
CVE:	CVE-2018-4083
Remote:	Yes
Local:	No
Published:	Feb 09 2018 12:00AM
Updated:	Feb 09 2018 12:00AM
Credit:	Ian Beer of Google Project Zero
Vulnerable:	Apple macOS 10.13.1 Apple macOS 10.13.2 Apple macOS 10.13 Apple macOS 10.12.6 Apple macOS 10.12.5 Apple macOS 10.12.4 Apple macOS 10.12.3 Apple macOS 10.12.2 Apple macOS 10.12.1 Apple macOS 10.12
Not Vulnerable:	Apple macOS 10.13.3

Apple macOS CVE-2018-4083 Memory Corruption Vulnerability

Apple macOS is prone to a memory-corruption vulnerability.

An attacker can leverage this issue to execute arbitrary code with system privileges. Failed exploit attempts will likely result in denial-of-service conditions.

Versions prior to macOS 10.13.3 are vulnerable.

Apple macOS CVE-2018-4083 Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple macOS CVE-2018-4083 Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple macOS CVE-2018-4083 Memory Corruption Vulnerability

References:

• MacOS kernel uaf due to lack of locking in AppleEmbeddedOSSupportHostClient::re (chromium.org)
  
• Apple Home Page (Apple)
  
• Mac OS X Homepage (Apple)
  
• About the security content of macOS High Sierra 10.13.3, Security Update 2018-00 (Apple)