PT-2019-10818 · Apple · Ios+5

Publicado 2019-01-11 · Atualizado 2019-01-17 · CVE-2018-4189

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.2.5 Apple macOS High Sierra versions prior to 10.13.3 Apple Security Update 2018-001 Sierra versions prior to the update Apple Security Update 2018-001 El Capitan versions prior to the update Apple watchOS versions prior to 4.2.2 Apple tvOS versions prior to 11.2.5

Description A memory corruption issue exists due to improper memory handling. This issue was addressed with improved memory handling.

Recommendations For iOS versions prior to 11.2.5, update to version 11.2.5 or later. For macOS High Sierra versions prior to 10.13.3, update to version 10.13.3 or later. For Security Update 2018-001 Sierra, apply the security update. For Security Update 2018-001 El Capitan, apply the security update. For watchOS versions prior to 4.2.2, update to version 4.2.2 or later. For tvOS versions prior to 11.2.5, update to version 11.2.5 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-4189

Produtos afetados

Security Update 2018-001 El Capitan

Security Update 2018-001 Sierra

Ios

Macos High Sierra

Tvos

Watchos

Referências · 6

• https://osv.dev/vulnerability/CVE-2018-4189 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-4189 · Nota de Segurança
• https://support.apple.com/HT208462 · Aviso do Fabricante
• https://support.apple.com/HT208465 · Aviso do Fabricante
• https://support.apple.com/HT208463 · Aviso do Fabricante
• https://support.apple.com/HT208464 · Aviso do Fabricante