Description
The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service (resource consumption) by making many connection attempts.
References
- appleios-tcp-dos(70530) vdb-entry
- APPLE-SA-2011-10-12-1 vendor-advisory
- http://support.apple.com/kb/HT4999
- http://support.apple.com/kb/HT5001
- 50087 vdb-entry
- APPLE-SA-2011-10-12-2 vendor-advisory