Opening userclient type 12 of IOSCSIPeripheralDeviceType00 leads to an exploitable kernel NULL dereference

ArashAll / google-security-research

Automatically exported from code.google.com/p/google-security-research

0 stars 0 forks source link

Opening userclient type 12 of IOSCSIPeripheralDeviceType00 leads to an exploitable kernel NULL dereference #562

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago

Opening userclient type 12 of IOSCSIPeripheralDeviceType00 leads to an 
exploitable kernel NULL dereference.

Tested on OS X 10.11 ElCapitan (15a284) on MacBookAir5,2

Original issue reported on code.google.com by ianb...@google.com on 8 Oct 2015 at 3:59

Attachments:

scsi_peripheral.c

GoogleCodeExporter commented 8 years ago

Original comment by ianb...@google.com on 8 Oct 2015 at 4:08

Added labels: Id-629636820, Reported-2015-Oct-08

GoogleCodeExporter commented 8 years ago

Apple advisory: https://support.apple.com/en-gb/HT205637

Original comment by ianb...@google.com on 20 Dec 2015 at 8:58

Changed state: Fixed
Added labels: CVE-2015-7068, Fixed-2015-Dec-08

GoogleCodeExporter commented 8 years ago

Original comment by ianb...@google.com on 27 Jan 2016 at 5:13

Removed labels: Restrict-View-Commit