Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.
Product
Apple Mac OS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.
Vulnerabilities 199
-
Critical 9.8
The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().
-
Critical 9.8
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().
-
Critical 9.8
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().
-
Critical 9.8
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().
-
Critical 9.8
The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().
-
Critical 9.8
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().
-
Critical 9.8
The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().
-
Critical 9.8
The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().
-
Critical 9.8
The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.
-
Critical 9.8
The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print().
-
Critical 9.8
The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions.
-
Critical 9.8
The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print().
-
Critical 9.8
The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions.
-
Critical 9.8
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
-
Critical 9.8
The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print().
-
Critical 9.8
The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print().
-
Critical 9.8
The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_pri…
-
Critical 9.8
The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print().
-
Critical 9.8
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh().
-
Critical 9.8
The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension().
-
Critical 9.8
The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions.
-
Critical 9.8
The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart().
-
Critical 9.8
The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions.
-
Critical 9.8
The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functio…
-
Critical 9.8
The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print().
-
Critical 9.8
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
-
Critical 9.8
The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print().
-
Critical 9.8
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
-
Critical 9.8
The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
-
Critical 9.8
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print().
-
Critical 9.8
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute().
-
Critical 9.8
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
-
Critical 9.8
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
-
Critical 9.8
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().
-
Critical 9.8
The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().
-
Critical 9.8
The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().
-
Critical 9.8
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
-
Critical 9.8
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().
-
Critical 9.8
The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().
-
Critical 9.8
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().
-
Critical 9.8
The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.
-
Critical 9.8
The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().
-
Critical 9.8
The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().
-
Critical 9.8
The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().
-
Critical 9.8
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
-
Critical 9.8
The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().
-
Critical 9.8
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().
-
Critical 9.8
The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().
-
Critical 9.8
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().
-
Critical 9.8
The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().
-
Critical 9.8
The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().
-
Critical 9.8
The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().
-
High 8.8
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact …
-
Medium 6.5
When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 b…
-
Medium 6.5
curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those number…
-
Low 3.7
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A sp…
-
Unscored —
In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured …
-
Unscored —CVE-2016-2161 EPSS 21%
In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and e…
-
Unscored —
libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service (memory corruption) or possi…
-
Unscored —CVE-2016-5387 EPSS 56%
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from …
-
Unscored —
The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h…
-
Unscored —CVE-2016-8743 EPSS 13%
Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests an…
-
Unscored —
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.
-
Unscored —
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper poin…
-
Unscored —
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper point…
-
Unscored —
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via …
-
Unscored —
An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicio…
-
Unscored —
The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of …
-
Unscored —
Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain…
-
Unscored —
The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles …
-
Unscored —
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains servic…
-
Unscored —
tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) …
-
Unscored —
tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
-
Unscored —
tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.
-
Unscored —
tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.
-
Unscored —
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().
-
Unscored —
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
-
Unscored —
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
-
Unscored —
The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse().
-
Unscored —
The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length().
-
Unscored —
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
-
Unscored —
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach().
-
Unscored —
The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print().
-
Unscored —
The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print().
-
Unscored —
The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header().
-
Unscored —
The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter().
-
Unscored —
The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print().
-
Unscored —
The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements().
-
Unscored —
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print().
-
Unscored —
Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal().
-
Unscored —
The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().
-
Unscored —
The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().
-
Unscored —
The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print().
-
Unscored —
The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.
-
Unscored —
The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().
-
Unscored —
The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.
-
Unscored —
The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().
-
Unscored —
The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().
-
Unscored —
The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().
-
Unscored —
The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
-
Unscored —
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().
-
Unscored —
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().
-
Unscored —
The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().
-
Unscored —
The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().
-
Unscored —
The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().
-
Unscored —
The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
-
Unscored —
The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) durin…
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handsha…
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handsh…
-
Unscored —
The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.
-
Unscored —
The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" co…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "APFS" comp…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS …
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "APFS" comp…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Dictionary…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS …
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Audio" com…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Remote Man…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "AppleScrip…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" co…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "fsck_msdos…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" c…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive…
-
Unscored —
An out-of-bounds read issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue invol…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" co…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HelpViewer…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ATS" compo…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFString" …
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Quick Look…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "QuickTime"…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Open Scrip…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CoreText" …
-
Unscored —CVE-2017-13826 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-10140. Reason: This candidate is a reservation duplicate of CVE-…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "kext tools" …
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Fonts" com…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork"…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HFS" compo…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" c…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "802.1X" co…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork"…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" co…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" co…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Installer" c…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Sandbox" c…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Spotlight" c…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" co…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" co…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" co…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" co…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "DesktopServi…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befo…
-
Unscored —CVE-2017-3167 EPSS 20%
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules o…
-
Unscored —CVE-2017-3169 EPSS 20%
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party mo…
-
Unscored —
The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly…
-
Unscored —
Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users…
-
Unscored —
NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the …
-
Unscored —
Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authent…
-
Unscored —
The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via…
-
Unscored —
Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remot…
-
Unscored —
Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x be…
-
Unscored —
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon cras…
-
Unscored —
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a mal…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "AppSandbox" …
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFa…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. The issue…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befo…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Screen Lock"…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befo…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Application …
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befo…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befo…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFa…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. iCloud be…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befo…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befo…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS befo…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Quick Look…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Directory Ut…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Mail" compon…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Captive Netw…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue i…
-
Unscored —CVE-2017-7659 EPSS 54%
A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NU…
-
Unscored —CVE-2017-7668 EPSS 57%
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which a…
-
Unscored —
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when s…
-
Unscored —
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the …
-
Unscored —CVE-2017-9788 EPSS 57%
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type '…
-
Unscored —
When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access mem…
Revision history
-
#8
Korrektur
-
#7
New remediations available
-
#5
cve added
-
#6
Version nicht vorhanden
-
#2
cve added
-
#3
Version nicht vorhanden
-
#4
Version nicht vorhanden
-
#1
Initial Release
References
-
Apple Security Advisory HT208144 vom 2017-09-25
https://support.apple.com/de-de/HT208144
-
Updated Apple Security Advisory HT208144 vom 2017-10-31
https://lists.apple.com/archives/security-announce/2017/Oct/msg00007.html
-
Updated Apple Security Advisory HT208144 vom 2017-10-31
https://lists.apple.com/archives/security-announce/2017/Oct/msg00001.html