Lucene search

K
cveAppleCVE-2015-5900
HistoryOct 09, 2015 - 5:59 a.m.

CVE-2015-5900

2015-10-0905:59:28
CWE-254
apple
web.nvd.nist.gov
42
cve-2015-5900
apple
os x
efi component
denial of service
nvd
security vulnerability
boot failure

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

5.8

Confidence

Low

EPSS

0.003

Percentile

67.8%

The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attackers to cause a denial of service (boot failure) via a crafted app that writes to an unintended address.

Affected configurations

Nvd
Node
applemac_os_xRange10.10.5
VendorProductVersionCPE
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

5.8

Confidence

Low

EPSS

0.003

Percentile

67.8%