InfoSecBulletin Cybersecurity for mankind
A PoC code has been released for the a serious vulnerability, CVE-2023-41974, on iOS and macOS. This vulnerability can be used to gain full control of a mobile device by exploiting a critical issue in the kernel, giving an application access to run any code with kernel privileges.
This discovery is based on Félix Poulin-Bélanger’s research, which uncovered a way to combine multiple flaws in the kernel. Poulin-Bélanger demonstrated these vulnerabilities and publicly shared the technical details of how he found and exploited the vulnerability.
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
500+ critical infrastructure hit by Medusa ransomware
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks
Poulin-Bélanger received $70,000 from the Apple Security Bounty program for his groundbreaking work. This encourages researchers worldwide to explore cybersecurity further.
The exploit was tested on the latest Apple devices like the iPhone 14 Pro Max and the MacBook Air M2 2022, showing how far-reaching and impactful this vulnerability is. The Proof-of-Concept (PoC) exploit demonstrates the CVE-2023-41974 flaw, giving a practical insight into this security breach.
Poulin-Bélanger has created a GitHub repository called kfd (kernel file descriptor) where he has shared his extensive research on the kernel memory of Apple devices. The kfd project aims to read and write kernel memory. on Apple devices.
It uses different vulnerabilities, specifically the exploitation of dangling PTEs (Page Table Entries), which are called PUAF (physical use-after-free) primitive. This new method reallocates certain kernel objects within these physical pages and directly manipulates them from user space through the dangling PTEs to achieve a KRKW (kernel read/write) primitive. The project is contained in the libkfd library and includes executable wrappers for both iOS and macOS.
