CVE-2014-4420
18.09.2014, 10:55
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371, CVE-2014-4419, and CVE-2014-4421.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | tvos | 𝑥 ≤ 6.2 |
| apple | tvos | 6.0 |
| apple | tvos | 6.0.1 |
| apple | tvos | 6.0.2 |
| apple | tvos | 6.1 |
| apple | tvos | 6.1.1 |
| apple | tvos | 6.1.2 |
| apple | iphone_os | 𝑥 ≤ 7.1.2 |
| apple | iphone_os | 7.0 |
| apple | iphone_os | 7.0.1 |
| apple | iphone_os | 7.0.2 |
| apple | iphone_os | 7.0.3 |
| apple | iphone_os | 7.0.4 |
| apple | iphone_os | 7.0.5 |
| apple | iphone_os | 7.0.6 |
| apple | iphone_os | 7.1 |
| apple | iphone_os | 7.1.1 |
| apple | mac_os_x | 𝑥 ≤ 10.10.1 |
𝑥
= Vulnerable software versions
References