PT-2020-8918 · Apple · Ios+1

Angel Ramirez · Published 2020-10-27 · Updated 2020-10-30 · CVE-2018-4381

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 12.1 Apple iOS versions prior to 12.1

Description A resource exhaustion issue was addressed with improved input validation. Processing a maliciously crafted message may lead to a denial of service.

Recommendations For tvOS versions prior to 12.1, update to tvOS 12.1 to resolve the issue. For iOS versions prior to 12.1, update to iOS 12.1 to resolve the issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2018-4381

Affected Products

Ios

Tvos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-4381 · Security Note
• https://support.apple.com/en-us/HT209194 · Vendor Advisory
• https://support.apple.com/en-us/HT209192 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-4381 · Vendor Advisory