CVE-2015-5842

2015-09-1810:59:56

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

Percentile

5.1%

JSON

XNU in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive memory-layout information via unknown vectors.

Affected configurations

Nvd

Node

appleiphone_osRange≤8.4.1

Node

applewatchosMatch1.0

Node

applemac_os_xRange≤10.10.5

VendorProductVersionCPE
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
applewatchos1.0cpe:2.3:o:apple:watchos:1.0:*:*:*:*:*:*:*
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	iphone_os	*	cpe:2.3:o:apple:iphone_os::::::::
apple	watchos	1.0	cpe:2.3:o:apple:watchos:1.0:::::::*
apple	mac_os_x	*	cpe:2.3:o:apple:mac_os_x::::::::