CVE-2014-4408

Description

The rt_setgate function in the kernel in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service (out-of-bounds read and device crash) via a crafted call.

Scores

Weaknesses (CWE)

• CWE-119

European references

• ENISA EUVD · EUVD-2014-4335
• GCVE · GCVE-0-2014-4408

CERT-FR advisories

• CERTFR-2014-AVI-436 — Multiples vulnérabilités dans les produits Apple · cert.ssi.gouv.fr
• CERTFR-2014-AVI-393 — Multiples vulnérabilités dans les produits Apple · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

• cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* ≤ 6.2
• cpe:2.3:o:apple:tvos:6.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:tvos:6.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:tvos:6.0.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:tvos:6.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:tvos:6.1.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:tvos:6.1.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* ≤ 7.1.2
• cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:iphone_os:7.1.1:*:*:*:*:*:*:*
• cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* ≤ 10.9.5

Affected products

References

• http://support.apple.com/kb/HT6441
• http://www.securitytracker.com/id/1030866
• http://www.securityfocus.com/bid/69939
• http://support.apple.com/kb/HT6442
• http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html
• http://www.securityfocus.com/bid/69882
• https://support.apple.com/kb/HT6535
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96086

Sources