VDB
GHSA-6w99-p6vc-wh73
GHSA-6w99-p6vc-wh73
PUBLISHED
CVSS 5.5 MEDIUM
Record from GitHub Advisory Database · Published October 25, 2023
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to cause a denial-of-service to Endpoint Security clients.
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Timeline
- Oct 25, 2023 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-6w99-p6vc-wh73
vulnetix vdb fixes GHSA-6w99-p6vc-wh73
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-6w99-p6vc-wh73/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/en-us/HT213983 url
- https://support.apple.com/kb/HT213983 url
- https://support.apple.com/kb/HT213985 url
- http://seclists.org/fulldisclosure/2023/Oct/21 url
- https://nvd.nist.gov/vuln/detail/CVE-2023-42854 advisory
- https://support.apple.com/en-us/HT213984 url
- https://support.apple.com/en-us/HT213985 url
- https://support.apple.com/kb/HT213984 url
- http://seclists.org/fulldisclosure/2023/Oct/24 url
- http://seclists.org/fulldisclosure/2023/Oct/26 url