The Patching Friars' AlmanacA calendar of CVE saints

March 19

SockPuppetHoly card for sockpuppet, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 SockPuppet MEMORIA LIBERATA
🤖 Image and text generated with AI

⬇ Download holy card: ·

⚔ Commemorated today: The Scourge of LockerGoga at Norsk Hydro (2019)

Embed on your site

Saint SockPuppet, Puppet of the Sockets

Patron of kernel sockets, iOS versions just left behind, and jailbreaks of old.

Life

On 19 March 2019 Ned Williamson of Google Project Zero described CVE-2019-8605, a use-after-free in Apple's kernel reachable through sockets. Fixed in iOS 12.3, it became one of the foundations of the jailbreaks of the time: a malicious app could run code with system privileges. A puppet moved by the strings of the sockets.

Prayer

O Saint SockPuppet, who moves the kernel like a doll, let our memory not be used after it is freed. Amen.

How to celebrate

Celebrated by updating to iOS 12.3 and later, in memory of those who ran custom themes without permission.

Memory freed and still used is a puppet in the attacker's hand.

Technical record

Disclosed on
March 19 2019
CVE
CVE-2019-8605
CVSS
7.8Actively exploited (CISA KEV)
Product
Apple · iOS

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

Sources: project-zero.issues.chromium.org · gist.github.com

Commemorated today

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.