Skip to content
OpenAdvisories
Unscored CVE-2019-8568 EUVD-2019-17958GHSA-q7gv-xfx9-7f68

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed …

Published Dec 18, 2019 · Updated Aug 4, 2024 · Assigned by apple

Description

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to modify protected parts of the file system.

Affected products

VendorProductAffectedFixed
Apple iOS unspecified – < iOS 12.3 iOS 12.3
Apple macOS unspecified – < macOS Mojave 10.14.5 macOS Mojave 10.14.5
Apple tvOS unspecified – < tvOS 12.3 tvOS 12.3
Apple watchOS unspecified – < watchOS 5.2.1 watchOS 5.2.1

References