Total vulnerabilities in the database
sys/openbsd/stack_protector.c in libc in Apple iOS 6.1.3 and Mac OS X 10.8.x does not properly parse the Apple strings employed in the user-space stack-cookie implementation, which allows local users to bypass cookie randomization by executing a program with a call-path beginning with the stack-guard= substring, as demonstrated by an iOS untethering attack or an attack against a setuid Mac OS X program.
| Software | From | Fixed in |
|---|---|---|
| apple / watchos | - | 1.0.1.x |
| apple / iphone_os | - | 8.2.x |
| apple / mac_os_x | - | 10.10.4.x |
| apple / mac_os_x | 10.8.3 | 10.8.3.x |
| apple / iphone_os | 6.1.3 | 6.1.3.x |
| apple / mac_os_x | 10.8.4 | 10.8.4.x |
| apple / mac_os_x | 10.8.1 | 10.8.1.x |
| apple / mac_os_x | 10.8.0 | 10.8.0.x |
| apple / mac_os_x | 10.8.2 | 10.8.2.x |