PT-2018-16513 · Apple+3 · Icloud+8

Published 2018-08-06 · Updated 2019-04-04 · CVE-2018-4266

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4.1 tvOS versions prior to 11.4.1 watchOS versions prior to 4.3.2 Safari versions prior to 11.1.2 iTunes versions prior to 12.8 for Windows iCloud for Windows versions prior to 7.6

Description A race condition was addressed with additional validation.

Recommendations For iOS versions prior to 11.4.1, update to version 11.4.1 or later. For tvOS versions prior to 11.4.1, update to version 11.4.1 or later. For watchOS versions prior to 4.3.2, update to version 4.3.2 or later. For Safari versions prior to 11.1.2, update to version 11.1.2 or later. For iTunes versions prior to 12.8 for Windows, update to version 12.8 or later. For iCloud for Windows versions prior to 7.6, update to version 7.6 or later.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2018-2099

CVE-2018-4266

MGASA-2018-0382

OPENSUSE-SU-2018_2781-1

OPENSUSE-SU-2019_0068-1

SUSE-SU-2018:2752-1

SUSE-SU-2019:0059-1

USN-3743-1

Affected Products

Alt Linux

Safari

Suse

Ubuntu

Icloud

Ios

Itunes

Tvos

Watchos

References · 90

• https://advisories.mageia.org/MGASA-2018-0382.html · Security Note
• https://ubuntu.com/security/notices/USN-3743-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-4266 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-4270 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-4266 · Security Note
• https://support.apple.com/kb/HT208932 · Vendor Advisory
• https://support.apple.com/kb/HT208933 · Vendor Advisory
• https://support.apple.com/kb/HT208938 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-4266 · Security Note
• https://osv.dev/vulnerability/USN-3743-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2752-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-4267 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12911 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:0059-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-4261 · Vendor Advisory