CVE-2013-6799Apple Mac Os X Improper Restriction of Operations within the Bounds of a Memory Buffer
NVD
Vulnerability Summary
Apple Mac OS X 10.9 allows local users to cause a denial of service (memory corruption or panic) by creating a hard link to a directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0105.
Affected & Patched Versions
- Apple Mac Os X
No patched version published yet
Until a fix ships, reduce exposure:
- Restrict access to the affected service or interface to trusted networks.
- Disable the affected feature if you do not need it.
- Watch the vendor advisory for a firmware or software update.
What to do
Prioritize this fix. Exploit code is public, so attacks can follow quickly.
- Check whether you run Apple Mac Os X and which version.
- No patched version is listed yet. Limit access to the affected service to trusted networks, and disable the feature if you can.
- Subscribe to the vendor advisory so you learn when a fix ships.
- Review logs and exposed services for signs of earlier compromise.
Timeline
- Nov 18, 2013Published
- Apr 29, 2026Record last modified
Score, severity and exploitation changes are tracked from the day Watchtower started logging them.
Get notified about new Apple CVEsYou are reading CVE-2013-6799. Get an email when KEV listings, exploits or new CVEs match your stack.
Notify me about Apple CVEsMore Apple Mac Os X CVEs
External References
- Exploithttp://archives.neohapsis.com/archives/bugtraq/2013-11/0033.html
- Exploithttp://archives.neohapsis.com/archives/bugtraq/2013-11/0051.html
- Exploithttp://cxsecurity.com/issue/WLB-2013110059
- Exploithttp://archives.neohapsis.com/archives/bugtraq/2013-11/0033.html
- Exploithttp://archives.neohapsis.com/archives/bugtraq/2013-11/0051.html
- Exploithttp://cxsecurity.com/issue/WLB-2013110059
Data last checked: Nov 14, 2026 21:37 UTC