PT-2016-3844 · Apple · Mdnsresponder

Published 2016-06-26 · Updated 2019-06-19 · CVE-2015-7988

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mDNSResponder versions prior to 625.41.2

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to a NULL pointer dereference. This is related to the handle regservice request function.

Recommendations For versions prior to 625.41.2, update to version 625.41.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2015-7988

Affected Products

Mdnsresponder

References · 5

• https://support.apple.com/HT206846 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7988 · Security Note
• http://securitytracker.com/id/1036181 · Note
• http://kb.cert.org/vuls/id/143335 · Note
• http://oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html · Note