CVE-2016-7660
HighSummary
An issue was discovered in certain Apple products related to the 'syslog' component. iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3 are affected, allowing local users to gain privileges via unspecified vectors related to Mach port name references.
Risk Assessment
The organization may be exposed to unauthorized access by local users, potentially leading to privilege escalation and security breaches.
Recommendation
It is recommended to update systems to the latest versions to mitigate this vulnerability and to monitor local user access.
Other vulnerabilities in syslog
See all- CVE-2016-1722High
A vulnerability in syslog on Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
- CVE-1999-0566Medium
An attacker can write to syslog files from any location, causing a denial of service by filling up the logs and hiding activities.
- CVE-1999-0171Low
CVE-1999-0171 vulnerability involves a denial of service (DoS) attack on the syslog system by sending a large number of superfluous messages.
Original NVD description (English source)
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "syslog" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references.