CVE-2014-4495

High

Published: 30/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not enforce the read-only attribute of a shared memory segment during use of a custom cache mode, allowing attackers to bypass intended access restrictions via a crafted app.

Risk Assessment

Organizations may be exposed to unauthorized access to sensitive data, potentially leading to information leaks or malicious application behavior.

Recommendation

It is recommended to update systems to the latest versions to mitigate this vulnerability and to monitor applications running on these platforms.

Other vulnerabilities in Jądro systemu operacyjnego Apple iOS, OS X oraz Apple TV

CVE-2015-1103High
The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes routing changes in response to ICMP_REDIRECT messages. This allows remote attackers to cause a denial of service (network outage) or obtain sensitive packet-content information via a crafted ICMP packet.

Original NVD description (English source)

The kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not enforce the read-only attribute of a shared memory segment during use of a custom cache mode, which allows attackers to bypass intended access restrictions via a crafted app.