CVE-2020-3873: Low severity Apple iOS and iPadOS vulnerability

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2020-3873.

Q: What is the title of the vulnerability?

The title of the vulnerability is 'Mail. This issue was addressed with improved setting propagation.'

Q: What software is affected by this vulnerability?

The vulnerability affects Apple iOS and Apple iPadOS versions up to and excluding 13.3.1.

Q: How was this vulnerability addressed?

This vulnerability was addressed with improved setting propagation.

Q: Where can I find more information about this vulnerability?

You can find more information about this vulnerability on the following Apple support page: [link](https://support.apple.com/en-us/HT210918).

Published Jan 28, 2020

Updated

Mail. This issue was addressed with improved setting propagation.

Other sources

This issue was addressed with improved setting propagation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Turning off "Load remote content in messages” may not apply to all mail previews.

Credit

Alexander Heinrich@@Sn0wfreeze(Technische Universit), Hudson Pridham(Bridgeable), Stuart Chapman

Affected Software

4 affected componentsFixes available

Apple iOS and iPadOS<13.3.1

13.3.1

Apple iOS, iPadOS, and macOS<13.3.1

13.3.1

Apple iOS, iPadOS, and macOS<13.3.1

iPhone OS<13.3.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Apple iOS and iPadOS to a version that resolves this vulnerability.
Fixed in 13.3.1
Upgrade
Upgrade Apple iOS, iPadOS, and macOS to a version that resolves this vulnerability.
Fixed in 13.3.1
Upgrade
Upgrade iOS/iPadOS to a version that resolves this vulnerability.
Fixed in 13.3.1
Configuration
Turn off "Load remote content in messages" to mitigate, noting it may not apply to all mail previews.
Mail Load remote content in messages = off

Event History

Feb 27, 2020

CVE Published

via MITRE·08:45 PM

Data Sourced

via MITRE·08:45 PM

DescriptionWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

HT210918

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2020-3873.

What is the title of the vulnerability?

The title of the vulnerability is 'Mail. This issue was addressed with improved setting propagation.'

What software is affected by this vulnerability?

The vulnerability affects Apple iOS and Apple iPadOS versions up to and excluding 13.3.1.

How was this vulnerability addressed?