{"metadata": {"vulnerability": "cve-2019-8561", "count": 30, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 22}}, "data": [{"timestamp": "2019-02-18T00:00:00Z", "date_only": false, "value": "2019-02-18T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2019-8561", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-03-26T00:00:00Z", "date_only": false, "value": "2019-03-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201912-0499", "record": "VAR-201912-0499", "field": "sources_release_date.data.3.date"}, {"timestamp": "2019-03-26T00:00:00Z", "date_only": false, "value": "2019-03-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-129", "record": "CERTFR-2019-AVI-129", "field": "last_revision_date"}, {"timestamp": "2019-03-26T00:00:00Z", "date_only": false, "value": "2019-03-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-129", "record": "CERTFR-2019-AVI-129", "field": "initial_release_date"}, {"timestamp": "2019-03-26T00:00:00Z", "date_only": false, "value": "2019-03-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-129", "record": "CERTFR-2019-AVI-129", "field": "revisions.0.revision_date"}, {"timestamp": "2019-03-28T00:00:00Z", "date_only": true, "value": "2019-03-28", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2019-08568", "record": "CNVD-2019-08568", "field": "submitTime"}, {"timestamp": "2019-03-29T00:00:00Z", "date_only": false, "value": "2019-03-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201912-0499", "record": "VAR-201912-0499", "field": "sources_release_date.data.2.date"}, {"timestamp": "2019-03-29T00:00:00Z", "date_only": true, "value": "2019-03-29", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2019-08568", "record": "CNVD-2019-08568", "field": "openTime"}, {"timestamp": "2019-12-18T00:00:00Z", "date_only": false, "value": "2019-12-18T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201912-0499", "record": "VAR-201912-0499", "field": "sources_release_date.data.0.date"}, {"timestamp": "2019-12-18T17:33:18Z", "date_only": false, "value": "2019-12-18T17:33:18.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2019-8561", "field": "cveMetadata.datePublished"}, {"timestamp": "2019-12-18T17:33:18Z", "date_only": false, "value": "2019-12-18T17:33:18.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "cve-2019-8561", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2019-12-18T18:15:00Z", "date_only": false, "value": "2019-12-18T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J83X-W3FJ-6VVJ", "record": "GHSA-J83X-W3FJ-6VVJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2019-12-18T18:15:00Z", "date_only": false, "value": "2019-12-18T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-8561", "record": "GSD-2019-8561", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2019-12-18T18:15:26.287Z", "date_only": false, "value": "2019-12-18T18:15:26.287000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201912-0499", "record": "VAR-201912-0499", "field": "sources_release_date.data.4.date"}, {"timestamp": "2019-12-18T18:15:26.287Z", "date_only": false, "value": "2019-12-18T18:15:26.287", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-8561", "record": "FKIE_CVE-2019-8561", "field": "published"}, {"timestamp": "2019-12-20T00:00:00Z", "date_only": false, "value": "2019-12-20T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201912-0499", "record": "VAR-201912-0499", "field": "sources_update_date.data.0.date"}, {"timestamp": "2019-12-20T16:41:00Z", "date_only": false, "value": "2019-12-20T16:41Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-8561", "record": "GSD-2019-8561", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-01-06T00:00:00Z", "date_only": false, "value": "2020-01-06T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201912-0499", "record": "VAR-201912-0499", "field": "sources_update_date.data.2.date"}, {"timestamp": "2021-10-29T00:00:00Z", "date_only": false, "value": "2021-10-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201912-0499", "record": "VAR-201912-0499", "field": "sources_update_date.data.3.date"}, {"timestamp": "2022-05-24T17:04:14Z", "date_only": false, "value": "2022-05-24T17:04:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J83X-W3FJ-6VVJ", "record": "GHSA-J83X-W3FJ-6VVJ", "field": "published"}, {"timestamp": "2022-05-24T17:04:14Z", "date_only": false, "value": "2022-05-24T17:04:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J83X-W3FJ-6VVJ", "record": "GHSA-J83X-W3FJ-6VVJ", "field": "modified"}, {"timestamp": "2022-11-11T02:56:41Z", "date_only": false, "value": "2022-11-11T02:56:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/74803", "record": "CVE-2019-8561", "field": "creation_timestamp", "uuid": "a1b3a8b7-9085-4345-89f5-a7e00c70f4ad", "content": "CVE-2019-8561: A Hard-to-Banish PackageKit Framework Vulnerability in macOS\n\nhttps://ift.tt/maPI2Ch", "url": "https://t.me/ctinow/74803"}, {"timestamp": "2022-11-12T13:12:01Z", "date_only": false, "value": "2022-11-12T13:12:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7151", "record": "CVE-2019-8561", "field": "creation_timestamp", "uuid": "5b415243-b032-4cf3-90c5-cb947637a20b", "content": "#Threat_Research\n1. A Hard-to-Banish PackageKit Framework Vulnerability in macOS (CVE-2019-8561)\nhttps://www.trendmicro.com/en_us/research/22/k/cve-2019-8561-a-hard-to-banish-packagekit-framework-vulnerabilit.html\n2. Google Pixel\u00a0Lock Screen Bypass (CVE-2022-20465)\nhttps://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass", "url": "https://t.me/CyberSecurityTechnologies/7151"}, {"timestamp": "2022-11-15T12:01:13Z", "date_only": false, "value": "2022-11-15T12:01:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3706", "record": "CVE-2019-8561", "field": "creation_timestamp", "uuid": "739c4a8c-eb78-461e-8dc3-6e1add82502b", "content": "\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Trend Micro \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 macOS PackageKit Framework, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 PackageKit \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0438\u0441\u0442\u0430\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0430 \u041f\u041e (\u0444\u0430\u0439\u043b\u044b PKG).\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-32895 \u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2019-8561.\n\n25 \u043c\u0430\u0440\u0442\u0430 2019 \u0433\u043e\u0434\u0430 Apple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 root, \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435, \u043e\u0431\u0445\u043e\u0434\u0443\u00a0\u0437\u0430\u0449\u0438\u0442\u044b \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Apple (SIP).\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0433\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 PackageKit \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u043e\u0432\u044c \u0435\u0439 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f. \u0412 \u0438\u0442\u043e\u0433\u0435 Apple \u0432\u043d\u043e\u0432\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS 13 (Ventura) \u0443\u0436\u0435 \u043a\u0430\u043a\u00a0CVE-2022-32895\u00a024 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\nCVE-2019-8561 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0435\u0442 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0434\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f TOCTTOU, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0444\u0430\u0439\u043b\u0430 PKG, \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e Apple.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0441\u043c\u043e\u0433 \u0440\u0435\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u043d\u0435\u0434\u0440\u0438\u0432 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u043e\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u043f\u043e\u0434\u043f\u0443\u0442\u0438 \u0444\u0430\u0439\u043b\u0430 PKG \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c XAR, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c API \u00abxar_open_digest_verify\u00bb.\n\n\u0417\u0430\u0442\u0435\u043c \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u0437 inputFD \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 \u043a\u043b\u0430\u0441\u0441\u0430 ObjC IASInputStream \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f inputStream. \u0412\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043e\u043d \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 inputStream.\n\n\u041f\u043e\u0441\u043b\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043e\u043d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u0440\u0430\u0432\u043d\u0430 \u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u0430\u044f \u0441\u0443\u043c\u043c\u0430 inputStream \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u043e\u043c\u0443 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e.\u00a0\u0415\u0441\u043b\u0438 \u044d\u0442\u043e \u0442\u0430\u043a, \u0442\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f, \u0432 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 - \u043f\u0440\u0435\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432\u0435\u0441\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441.\n\n\u041f\u0440\u043e\u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u041e\u0421 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0438\u0441\u043a\u0443\u044e\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 SIP.", "url": "https://t.me/true_secator/3706"}, {"timestamp": "2023-12-13T01:23:48.425Z", "date_only": false, "value": "2023-12-13T01:23:48.425013Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-8561", "record": "GSD-2019-8561", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T21:24:28.363Z", "date_only": false, "value": "2024-08-04T21:24:28.363Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2019-8561", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T21:24:28.363Z", "date_only": false, "value": "2024-08-04T21:24:28.363Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2019-8561", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-21T04:50:04.313Z", "date_only": false, "value": "2024-11-21T04:50:04.313000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201912-0499", "record": "VAR-201912-0499", "field": "sources_update_date.data.4.date"}, {"timestamp": "2024-11-23T20:31:08.871Z", "date_only": false, "value": "2024-11-23T20:31:08.871000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201912-0499", "record": "VAR-201912-0499", "field": "last_update_date"}, {"timestamp": "2026-06-17T02:42:09.643Z", "date_only": false, "value": "2026-06-17T02:42:09.643", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-8561", "record": "FKIE_CVE-2019-8561", "field": "lastModified"}]}