CVE-2011-2391

Description

The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU consumption) via crafted ICMPv6 packets.

Scores

Faiblesses (CWE)

• CWE-20

Références européennes

• ENISA EUVD · EUVD-2011-2380
• GCVE · GCVE-0-2011-2391

Avis du CERT-FR

• CERTFR-2015-AVI-040 — Multiples vulnérabilités dans Apple OS X · cert.ssi.gouv.fr
• CERTFR-2014-AVI-436 — Multiples vulnérabilités dans les produits Apple · cert.ssi.gouv.fr
• CERTFR-2014-AVI-393 — Multiples vulnérabilités dans les produits Apple · cert.ssi.gouv.fr
• CERTA-2013-AVI-601 — Multiples vulnérabilités dans Apple OS X Mavericks · cert.ssi.gouv.fr
• CERTA-2013-AVI-541 — Multiples vulnérabilités dans Apple TV · cert.ssi.gouv.fr
• CERTA-2013-AVI-536 — Multiples vulnérabilités dans Apple iOS · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

• cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* ≤ 10.9.5
• cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:* ≤ 12.1
• cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* ≤ 6.1.4
• cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*
• +10 autres

Produits affectés

Références

• https://exchange.xforce.ibmcloud.com/vulnerabilities/87222
• http://www.securitytracker.com/id/1029054
• http://support.apple.com/kb/HT6441
• http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
• http://osvdb.org/97438
• http://support.apple.com/kb/HT6442
• http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html
• http://secunia.com/advisories/54886
• http://support.apple.com/kb/HT5934
• http://support.apple.com/HT204244
• https://support.apple.com/kb/HT6535
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
• http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

Sources