exploitDog

CVE-2018-4105

Опубликовано: 03 апр. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "APFS" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection.

Ссылки

http://www.securityfocus.com/bid/103582
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040608
Third Party Advisory
VDB Entry
https://support.apple.com/HT208692
Vendor Advisory
http://www.securityfocus.com/bid/103582
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040608
Third Party Advisory
VDB Entry
https://support.apple.com/HT208692
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.13.4 (исключая)

EPSS

Процентиль: 82%

0.01792

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-465r-h5jf-qfwj

CVSS3: 9.8

github

больше 3 лет назад

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "APFS" component. It allows attackers to trigger truncation of an APFS volume password via an unspecified injection.

EPSS

Процентиль: 82%

0.01792

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-20