Lucene search

K
appleAppleAPPLE:CBE1E3FB879BB0308C710857CB45D915
HistoryMay 30, 2019 - 12:00 a.m.

About the security content of AirPort Base Station Firmware Update 7.9.1

2019-05-3000:00:00
support.apple.com
4

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

About the security content of AirPort Base Station Firmware Update 7.9.1

This document describes the security content of AirPort Base Station Firmware Update 7.9.1.

About Apple security updates

For our customers’ protection, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page.

Apple security documents reference vulnerabilities by CVE-ID when possible.

For more information about security, see the Apple Product Security page.

AirPort Base Station Firmware Update 7.9.1

Released May 30, 2019

AirPort Base Station Firmware

Available for: AirPort Extreme and AirPort Time Capsule base stations with 802.11ac

Impact: A remote attacker may be able to leak memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2019-8581: Lucio Albornoz

AirPort Base Station Firmware

Available for: AirPort Extreme and AirPort Time Capsule base stations with 802.11ac

Impact: A remote attacker may be able to cause a system denial of service

Description: A null pointer dereference was addressed with improved input validation.

CVE-2019-8588: Vince Cali (@0x56)

AirPort Base Station Firmware

Available for: AirPort Extreme and AirPort Time Capsule base stations with 802.11ac

Impact: A remote attacker may be able to cause a system denial of service

Description: A denial of service issue was addressed with improved validation.

CVE-2018-6918: Maxime Villard

AirPort Base Station Firmware

Available for: AirPort Extreme and AirPort Time Capsule base stations with 802.11ac

Impact: A remote attacker may be able to cause arbitrary code execution

Description: A use after free issue was addressed with improved memory management.

CVE-2019-8578: Maxime Villard

AirPort Base Station Firmware

Available for: AirPort Extreme and AirPort Time Capsule base stations with 802.11ac

Impact: A base station factory reset may not delete all user information

Description: The issue was addressed with improved data deletion.

CVE-2019-8575: Francesco Ferretti of Magnetic Media Network SpA, joshua stein

Entry updated July 2, 2019

AirPort Base Station Firmware

Available for: AirPort Extreme and AirPort Time Capsule base stations with 802.11ac

Impact: An attacker in a privileged position may be able to perform a denial of service attack

Description: A denial of service issue was addressed with improved memory handling.

CVE-2019-7291: Maxime Villard

AirPort Base Station Firmware

Available for: AirPort Extreme and AirPort Time Capsule base stations with 802.11ac

Impact: Source-routed IPv4 packets may be unexpectedly accepted

Description: Source-routed IPv4 packets were disabled by default.

CVE-2019-8580: Maxime Villard

AirPort Base Station Firmware

Available for: AirPort Extreme and AirPort Time Capsule base stations with 802.11ac

Impact: A remote attacker may be able to cause arbitrary code execution

Description: A null pointer dereference was addressed with improved input validation.

CVE-2019-8572: Maxime Villard

Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.

Published Date: July 02, 2019

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

Related for APPLE:CBE1E3FB879BB0308C710857CB45D915