Unscored CVE-2015-3709 EUVD-2015-3745GHSA-79hp-79r5-wpmf

Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements for kernel extension…

Published Jul 3, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements for kernel extensions by leveraging improper pathname validation.

References

APPLE-SA-2015-06-30-2 vendor-advisory
75493 vdb-entry
1032760 vdb-entry
http://support.apple.com/kb/HT204942