Unscored CVE-2014-1361 EUVD-2014-1439GHSA-8gjh-39j4-6x54

Secure Transport in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 does not ensure that a DTLS message is acce…

Published Jul 1, 2014 · Updated Aug 6, 2024 · Assigned by apple

Description

Secure Transport in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 does not ensure that a DTLS message is accepted only for a DTLS connection, which allows remote attackers to obtain potentially sensitive information from uninitialized process memory by providing a DTLS message within a TLS connection.

References

http://support.apple.com/kb/HT6296
APPLE-SA-2014-06-30-2 vendor-advisory
APPLE-SA-2014-06-30-4 vendor-advisory
APPLE-SA-2014-06-30-3 vendor-advisory
59475 third-party-advisory
1030500 vdb-entry