multi_path

multipath - exploit para el issue p0 1558 CVE-2018-4241 @i41nbeer mptcpusrconnectx es el manejador de la syscall connectx para la familia de sockets APMULTIPATH. La lógica de esta función falla al manejar correctamente sockaddrs de origen y destino que no son AFINET o AFINET6: // verify salen for...

The vulnerability of the mptcp_usr_connectx function in the kernels of operating systems such as Mac OS X, iOS, tvOS, and watchOS allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the mptcpusrconnectx function in the kernels of operating systems such as Mac OS X, iOS, tvOS, and watchOS arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created...

CVE-2018-4241

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcpusrconnectx allows attackers to execute arbitrary...

CVE-2018-4241

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcpusrconnectx allows attackers to execute arbitrary...

Buffer overflow

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcpusrconnectx allows attackers to execute arbitrary...

CVE-2018-4241

CVE-2018-4241 is an intra-object linear heap buffer overflow in Apple’s XNU kernel, specifically in mptcp_usr_connectx. The issue affects iOS prior to 11.4, macOS prior to 10.13.5, tvOS prior to 11.4, and watchOS prior to 4.3.1, and can lead to arbitrary code execution in kernel context via a cra...

CVE-2018-4241: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcpusrconnectx allows attackers to execute arbitrary...

Multiple Apple Products Kernel Component Buffer Overflow Vulnerability

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. kernel is a...