Lucene search

[email protected]CVE-2018-4248

HistoryApr 03, 2019 - 6:29 p.m.

CVE-2018-4248

2019-04-0318:29:00

CWE-125

[email protected]

web.nvd.nist.gov

cve-2018-4248

out-of-bounds read

input validation

ios

macos

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.1 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.3%

JSON

An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.

CPENameOperatorVersion
apple:iphone_osapple iphone oslt11.4.1
apple:watchosapple watchoslt4.3.2
apple:mac_os_xapple mac os xlt10.13.6
apple:tvosapple tvoslt11.4.1

CPE	Name	Operator	Version
apple:iphone_os	apple iphone os	lt	11.4.1
apple:watchos	apple watchos	lt	4.3.2
apple:mac_os_x	apple mac os x	lt	10.13.6
apple:tvos	apple tvos	lt	11.4.1

References

support.apple.com/kb/HT208935

support.apple.com/kb/HT208936

support.apple.com/kb/HT208937

support.apple.com/kb/HT208938

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.1 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.3%

JSON

Related for CVE-2018-4248

prion1 openvas1 apple8 nessus3