maride/hacktricks
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks.git synced 2025-10-10 18:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Translated ['src/macos-hardening/macos-security-and-privilege-escalation

Browse Source
This commit is contained in:
Translator 2025-07-17 10:38:44 +00:00
parent a1670581e4
commit 137f3bfe4b
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/macos-hardening/macos-security-and-privilege-escalation/mac-os-architecture/macos-kernel-vulnerabilities.md
View File

@ -11,7 +11,7 @@
## 2024: U divljini Kernel 0-dana (CVE-2024-23225 & CVE-2024-23296) ## 2024: U divljini Kernel 0-dana (CVE-2024-23225 & CVE-2024-23296)
Apple je zakrpio dve greške u korupciji memorije koje su aktivno korišćene protiv iOS-a i macOS-a u martu 2024. (ispravljeno u macOS 14.4/13.6.5/12.7.4). Apple je zakrpio dve greške u korupciji memorije koje su aktivno korišćene protiv iOS-a i macOS-a u martu 2024 (ispravljeno u macOS 14.4/13.6.5/12.7.4).
* **CVE-2024-23225 – Kernel** * **CVE-2024-23225 – Kernel**
• Pisanje van granica u XNU virtuelnom memorijskom podsistemu omogućava neprivilegovanom procesu da dobije proizvoljno čitanje/pisanje u adresnom prostoru kernela, zaobilazeći PAC/KTRR. • Pisanje van granica u XNU virtuelnom memorijskom podsistemu omogućava neprivilegovanom procesu da dobije proizvoljno čitanje/pisanje u adresnom prostoru kernela, zaobilazeći PAC/KTRR.
@ -67,7 +67,7 @@ Detection tips:
kmutil showloaded | grep -v com.apple # list non-Apple kexts kmutil showloaded | grep -v com.apple # list non-Apple kexts
log stream --style syslog --predicate 'senderImagePath contains "storagekitd"' # watch for suspicious child procs log stream --style syslog --predicate 'senderImagePath contains "storagekitd"' # watch for suspicious child procs
``` ```
Odmah rešenje je ažuriranje na macOS Sequoia 15.2 ili noviji. Odmah rešenje je ažurirati na macOS Sequoia 15.2 ili noviji.
--- ---