CVE-2018-4247

Опубликовано: 08 июн. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (persistent Safari outage) via a crafted web site.

Ссылки

http://www.securityfocus.com/bid/104366
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041029
Third Party Advisory
VDB Entry
https://support.apple.com/HT208848
Vendor Advisory
https://support.apple.com/HT208854
Vendor Advisory
https://twitter.com/Nate_Kappa/status/1004399403220766725
Third Party Advisory
http://www.securityfocus.com/bid/104366
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041029
Third Party Advisory
VDB Entry
https://support.apple.com/HT208848
Vendor Advisory
https://support.apple.com/HT208854
Vendor Advisory
https://twitter.com/Nate_Kappa/status/1004399403220766725
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 11.1.1 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 11.4 (исключая)

EPSS

Процентиль: 78%

0.01134

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-8q5h-8624-2958