Vulnerability Description
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0. A remote attacker may be able to leak memory.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Icloud | < 11.5 |
| Apple | Itunes | >= 12.0.0, < 12.10.9 |
| Apple | Ipados | < 14.0 |
| Apple | Macos | < 11.0.1 |
| Apple | Tvos | < 14.0 |
| Apple | Watchos | < 7.0 |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2020/Dec/32Mailing ListThird Party Advisory
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430
- https://support.apple.com/en-us/HT211843Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211844Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211850Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211931Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211935Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211952Release NotesVendor Advisory
- http://seclists.org/fulldisclosure/2020/Dec/32Mailing ListThird Party Advisory
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430
- https://support.apple.com/en-us/HT211843Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211844Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211850Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211931Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211935Release NotesVendor Advisory
FAQ
What is CVE-2020-9849?
CVE-2020-9849 is a vulnerability with a CVSS score of 6.5 (MEDIUM). An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for...
How severe is CVE-2020-9849?
CVE-2020-9849 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-9849?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Icloud, Apple Itunes, Apple Ipados, Apple Macos, Apple Tvos.