CVE-2015-1103
5.8 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.073 Low
EPSS
Percentile
94.1%
The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes routing changes in response to ICMP_REDIRECT messages, which allows remote attackers to cause a denial of service (network outage) or obtain sensitive packet-content information via a crafted ICMP packet.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:iphone_os | apple iphone os | le | 8.2 |
| apple:tvos | apple tvos | le | 7.1 |
| apple:mac_os_x | apple mac os x | le | 10.10.2 |
References
lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
lists.apple.com/archives/security-announce/2015/Apr/msg00003.html
www.securitytracker.com/id/1032048
support.apple.com/HT204659
support.apple.com/HT204661
support.apple.com/HT204662
support.apple.com/kb/HT204870
Social References
More
Related
5.8 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.073 Low
EPSS
Percentile
94.1%