Description
The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID information via a crafted app.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | davfs2 | 1.6.0-2.7 | openSUSE-SU-2024:10710-1 |
Advisories 1
- openSUSE-SU-2024:10710-1 davfs2-1.6.0-2.7 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- http://support.apple.com/kb/HT6441
- 69920 vdb-entry
- 1030866 vdb-entry
- 69882 vdb-entry
- appleios-cve20144362-info-disc(96104) vdb-entry
- APPLE-SA-2014-09-17-1 vendor-advisory