Lucene search

[email protected]CVE-2014-4408

HistorySep 18, 2014 - 10:55 a.m.

CVE-2014-4408

2014-09-1810:55:09

CWE-119

[email protected]

web.nvd.nist.gov

cve-2014-4408

apple

ios

kernel

security

privilege escalation

denial of service

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The rt_setgate function in the kernel in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service (out-of-bounds read and device crash) via a crafted call.

Affected configurations

NVD

Node

appletvosRange≤6.2

appletvosMatch6.0

appletvosMatch6.0.1

appletvosMatch6.0.2

appletvosMatch6.1

appletvosMatch6.1.1

appletvosMatch6.1.2

Node

appleiphone_osRange≤7.1.2

appleiphone_osMatch7.0

appleiphone_osMatch7.0.1

appleiphone_osMatch7.0.2

appleiphone_osMatch7.0.3

appleiphone_osMatch7.0.4

appleiphone_osMatch7.0.5

appleiphone_osMatch7.0.6

appleiphone_osMatch7.1

appleiphone_osMatch7.1.1

Node

applemac_os_xRange≤10.9.5

CPENameOperatorVersion
apple:tvosapple tvosle6.2
apple:tvosapple tvoseq6.0
apple:tvosapple tvoseq6.0.1
apple:tvosapple tvoseq6.0.2
apple:tvosapple tvoseq6.1
apple:tvosapple tvoseq6.1.1
apple:tvosapple tvoseq6.1.2

CPE	Name	Operator	Version
apple:tvos	apple tvos	le	6.2
apple:tvos	apple tvos	eq	6.0
apple:tvos	apple tvos	eq	6.0.1
apple:tvos	apple tvos	eq	6.0.2
apple:tvos	apple tvos	eq	6.1
apple:tvos	apple tvos	eq	6.1.1
apple:tvos	apple tvos	eq	6.1.2