CVE-2018-4189

Опубликовано: 11 янв. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, watchOS before 4.2.2, and tvOS before 11.2.5, a memory corruption issue exists and was addressed with improved memory handling.

Ссылки

https://support.apple.com/HT208462
Vendor Advisory
https://support.apple.com/HT208463
Vendor Advisory
https://support.apple.com/HT208464
Vendor Advisory
https://support.apple.com/HT208465
Vendor Advisory
https://support.apple.com/HT208462
Vendor Advisory
https://support.apple.com/HT208463
Vendor Advisory
https://support.apple.com/HT208464
Vendor Advisory
https://support.apple.com/HT208465
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:apple_tv:*:*:*:*:*:*:*:*

Версия до 11.2.5 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 11.2.5 (исключая)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия от 10.13.0 (включая) до 10.13.3 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 4.2.2 (исключая)

EPSS

Процентиль: 72%

0.00714

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-p28g-8qw4-9v8q