Alert GCSA-21103 - Vulnerabilita' nei prodotti Apple (APPLE-SA-2021-09-20)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
******************************************************************
Alert ID: GCSA-21103
Data: 21 Settembre 2021
Titolo: Vulnerabilita' nei prodotti Apple (APPLE-SA-2021-09-20)
******************************************************************
:: Descrizione del problema
Sono state identificate vulnerabilita' multiple nei prodotti Apple che potrebbero
essere sfruttate da un attaccanti locali e remoti.
Maggiori informazioni sono disponibili nelle segnalazioni
ufficiali alla sezione "Riferimenti".
:: Software interessato
versioni precedenti a:
iOS 15
iPadOS 15
watchOS 8
tvOS 15
Xcode 13
Safari 15
iTunes U 3.8.3
iTunes 12.12 per Windows
:: Impatto
Esecuzione remota di codice arbitrario
Denial of Service
Furto di identita'
Accesso a informazioni riservate e/o sensibili
:: Soluzione
Aggiornare i software alle ultime versioni
iOS 15
iPadOS 15
watchOS 8
tvOS 15
Xcode 13
Safari 15
iTunes U 3.8.3
iTunes 12.12 per Windows
:: Riferimenti
Apple
https://support.apple.com/HT212814
https://support.apple.com/HT212819
https://support.apple.com/HT212815
https://support.apple.com/HT212818
https://support.apple.com/HT212816
https://support.apple.com/HT212807
https://support.apple.com/HT212804
https://support.apple.com/HT212805
https://support.apple.com/HT212809
https://support.apple.com/HT212817
Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0340
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0742
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0746
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0747
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7529
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16843
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16844
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16845
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20372
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30810
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30811
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30815
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30819
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30825
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30826
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30835
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30837
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30838
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30841
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30842
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30843
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30846
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30847
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30848
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30849
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30850
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30851
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30854
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30855
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30857
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30858
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30860
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30862
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30863
GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iF0EARECAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCYUmmvAAKCRDBnEyTZRJg
QjpeAKC5LfYD7PJGvAv5RLWCHERHcRTJQQCfQ1BOmNqbwotkkIT1KeghVsT6XiM=
=xIAs
-----END PGP SIGNATURE-----