CVE-2018-4154

Опубликовано: 03 апр. 2018

Источник: nvd

CVSS3: 7

CVSS2: 7.6

EPSS Низкий

Описание

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Storage" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.

Ссылки

http://www.securityfocus.com/bid/103581
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/105273
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040604
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040608
Third Party Advisory
VDB Entry
https://support.apple.com/HT208692
Vendor Advisory
https://support.apple.com/HT208693
Vendor Advisory
http://www.securityfocus.com/bid/103581
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/105273
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040604
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040608
Third Party Advisory
VDB Entry
https://support.apple.com/HT208692
Vendor Advisory
https://support.apple.com/HT208693
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 11.3 (исключая)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.13.4 (исключая)

EPSS

Процентиль: 36%

0.00155

Низкий

7 High

CVSS3

7.6 High

CVSS2

Дефекты

CWE-362

Связанные уязвимости

GHSA-7fgh-fc7p-p7v5