Lucene search

AppleCVE-2015-7020

HistoryOct 23, 2015 - 9:59 p.m.

CVE-2015-7020

2015-10-2321:59:53

CWE-119

apple

web.nvd.nist.gov

nvidia

driver

graphics drivers

apple os x

kernel memory

denial of service

out-of-bounds read

system crash

cve-2015-7020

cve-2015-7019

nvd

CVSS2

5.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:P/I:N/A:C

AI Score

7.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than CVE-2015-7019.

Affected configurations

Nvd

Node

applemac_os_xRange≤10.11.0

VendorProductVersionCPE
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	*	cpe:2.3:o:apple:mac_os_x::::::::

References

lists.apple.com/archives/security-announce/2015/Oct/msg00005.html

support.apple.com/HT205375

CVSS2

5.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:P/I:N/A:C

AI Score

7.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2015-7020