CVE-2015-1103

High

Published: 10/04/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes routing changes in response to ICMP_REDIRECT messages. This allows remote attackers to cause a denial of service (network outage) or obtain sensitive packet-content information via a crafted ICMP packet.

Risk Assessment

Attackers can exploit this vulnerability to disrupt network operations or steal sensitive data, potentially leading to serious consequences for the organization.

Recommendation

It is recommended to update systems to the latest versions to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Jądro systemu operacyjnego Apple iOS, OS X oraz Apple TV

CVE-2014-4495High
The kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not enforce the read-only attribute of a shared memory segment during use of a custom cache mode, allowing attackers to bypass intended access restrictions via a crafted app.

Original NVD description (English source)

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes routing changes in response to ICMP_REDIRECT messages, which allows remote attackers to cause a denial of service (network outage) or obtain sensitive packet-content information via a crafted ICMP packet.