Improper input validation in Apple Iphone Os
CVE-2013-0964
The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.006 (46.7th percentile) — read the EPSS interpretation.
Affected products
- Apple Iphone_os — versions 6.0, 6.0.1
- Apple Tvos — versions 1.0.0, 1.1.0, 2.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (x_refsource_OSVDB, vdb-entry)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)
- product-security@apple.com (vdb-entry, x_refsource_BID)