CVE-2013-3952
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-3952
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The fill_pipeinfo function in bsd/kern/sys_pipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protection mechanism via the PROC_PIDFDPIPEINFO option to the proc_info system call for a kernel pipe handle.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apple Mac OS X XNU内核 ‘fill_pipeinfo’函数安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apple Mac OS X是美国苹果（Apple）公司为Mac计算机所开发的一套专用操作系统。 Apple Mac OS X 10.8.x版本中的XNU内核中的bsd/kern/sys_pipe.c中的‘fill_pipeinfo’函数中存在漏洞。本地攻击者可通过PROC_PIDFDPIPEINFO选项对内核管道处理进行proc_info系统调用利用该漏洞使KASLR保护机制失效。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2013-3952
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-3952
Please Login to view more intelligence information
- http://www.syscan.org/index.php/sg/program/day/2x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2013-3952
Same Patch Batch · n/a · 2013-06-05 · 34 CVEs total
| CVE-2013-2858 | Google Chrome HTML5 Audio实现释放后重用漏洞 | |
| CVE-2013-3955 | Apple iOS XNU内核‘get_xattrinfo’函数拒绝服务漏洞 | |
| CVE-2013-0508 | IBM Tivoli Netcool/System Service Monitor 本地缓冲区溢出漏洞 | |
| CVE-2013-0509 | IBM Tivoli Netcool/System Service Monitor 远程缓冲区溢出漏洞 | |
| CVE-2013-3475 | IBM DB2/DB2 Connect Audit Facility 栈缓冲区溢出漏洞 | |
| CVE-2013-2854 | Google Chrome 拒绝服务漏洞 | |
| CVE-2013-2855 | Google Chrome Developer Tools API拒绝服务漏洞 | |
| CVE-2013-2856 | Google Chrome 释放后重用漏洞 | |
| CVE-2013-2857 | Google Chrome 释放后重用漏洞 | |
| CVE-2013-3954 | Apple Mac OS X XNU内核posix_spawn系统调用拒绝服务漏洞 | |
| CVE-2013-2859 | Google Chrome 安全漏洞 | |
| CVE-2013-2860 | Google Chrome 释放后重用漏洞 | |
| CVE-2013-2861 | Google Chrome SVG实现释放后重用漏洞 | |
| CVE-2013-2862 | Google Chrome Skia拒绝服务漏洞 | |
| CVE-2013-2863 | Google Chrome 任意代码执行漏洞 | |
| CVE-2013-2864 | Google Chrome PDF功能拒绝服务漏洞 | |
| CVE-2013-2865 | Google Chrome 多个安全漏洞 | |
| CVE-2013-0975 | Apple Mac OS X QuickDraw Manager 缓冲区溢出漏洞 | |
| CVE-2013-3953 | Apple Mac OS X ‘mach_port_space_info’函数拒绝服务漏洞 | |
| CVE-2013-3951 | Apple iOS和Mac OS X libc sys/openbsd/stack_protector.c安全漏洞 |
Showing top 20 of 34 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8248
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send
V. Comments for CVE-2013-3952
No comments yet