The Patching Friars' AlmanacA calendar of CVE saints

May 30

MigraineHoly card for migraine, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 SIP Migraine DOLOR CAPITIS SIP
🤖 Image and text generated with AI

⬇ Download holy card: ·

☀ Commemorated today: The Miracle of Operation Endgame (2024)

Embed on your site

Saint Migraine, Headache of System Protection

Patron of macOS System Integrity Protection, system daemons with special permissions, and updates that step over the barriers.

Life

On 30 May 2023 Microsoft researchers described Migraine (CVE-2023-32369), a way to bypass macOS System Integrity Protection, the barrier that guards the system's most delicate parts even from the administrator. By abusing a system daemon with special privileges during restore, an attacker could modify protected areas of the file system. Apple fixed it in macOS Ventura 13.4 and the earlier supported releases.

Prayer

O Saint Migraine, who gives System Integrity Protection a headache, let our privileged daemons not be used by strangers. Amen.

How to celebrate

Celebrated by updating to macOS 13.4 or later and, if needed, taking something for the headache.

Privileged daemon, barrier stepped over.

Technical record

Disclosed on
May 30 2023
CVE
CVE-2023-32369
CVSS
6.0
Product
Apple · macOS

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system.

Sources: microsoft.com

Commemorated today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.