Apple Security Advisory 2017-07-19-1 - iOS 10.3.3 is now available and addresses code execution, memory corruption, and various other vulnerabilities.
8c0895fdc3becd88ea61b4c102a0c59bMacOS and iOS suffer from a userspace entitlement race condition.
b0f376780fac414cf9f189a9511d126fApple iOS / OS X suffer from a NSKeyedArchiver memory corruption vulnerability due to a lack of bounds checking in CAMediaTimingFunctionBuiltin.
23db36b84cf1781ab0aa9de1337b3eaeApple iOS / MacOS suffers from a NSKeyedArchiver heap corruption vulnerability due to a rounding error in TIKeyboardLayout initWithCoder:.
f4f95e9fe07f16fd6bb2e6208f80ac9fApple iOS / MacOS suffers from a memory corruption vulnerability due to bad bounds checking in NSCharacterSet coding for NSKeyedUnarchiver.
bdda55cda546b5c21d799497330d24d7Apple iOS / MacOS suffers from a kernel memory disclosure vulnerability due to lack of bounds checking in netagent socket option handling.
45cfcbcc7c332ce751e0f1cb5ebc14ccApple iOS / MacOS suffer from a kernel use-after-free vulnerability due to bad locking in unix domain socket file descriptor externalization.
bdf2e91d40e4ff551aba3904d5996640Apple iOS versions prior to 10.3.2 suffer from a notifications API denial of service vulnerability.
e7f30748b1d19cee9874067dca9cef86Apple Security Advisory 2017-05-15-2 - iOS 10.3.2 is now available and addresses memory corruption, code execution, and various other vulnerabilities.
15f38e3c3854fe955222968c9e625838Microsoft OneDrive iOS App version 8.13 suffers from insecure handling of URI schemes.
da936eae0a4879da17612c7669145131Cisco Catalyst 2960 with IOS version 12.2(55)SE1 ROCEM remote code execution exploit.
3a6c0e64cf90f6b40458df2e040554daCisco Catalyst 2960 with IOS version 12.2(55)SE11 ROCEM remote code execution exploit.
252028a693dd29d6d6ffaef31e0a9c10The MacOS/iOS kernel suffers from double free due to bad locking in fsevents device.
6a929aa0a7b4639ae693d1a0f4bab543The MacOS/iOS kernel suffers from a heap overflow in bpf.
04a0b478366f9dac50b1c4da133e3773The MacOS/iOS kernel suffers from a use-after-free vulnerability due to bad locking in necp_open.
d17fc3625074faceadc01a944d5d1b46MacOS/iOS suffers from a kernel memory corruption vulnerability due to an off-by-one in SIOCGIFORDER socket ioctl.
2a4eacf10705209b72b84339422bb5a7MacOS/iOS suffer from a kernel memory corruption vulnerability due to bad bounds checking in SIOCSIFORDER socket ioctl.
7cc2e563a8a32d824a26c903fcd68a07Apple Security Advisory 2017-04-03-1 - iOS 10.3.1 is now available and addresses a wifi vulnerability.
d02ac418fea92c51f16e1bf3a1de203dMacOS/iOS suffer from an issue where mach_msg does not copy memory in a certain case.
4b71a1996ca4bb954f02be44d9568102Apple Security Advisory 2017-03-27-4 - iOS 10.3 is now available and addresses code execution, information disclosure, denial of service, and various other vulnerabilities.
ca8150c7012917f3969636d4fd66d8d6Apple Security Advisory 2017-03-27-1 - Pages 6.1, Numbers 4.1, and Keynote 7.1 for Mac; Pages 3.1, Numbers 3.1, and Keynote 3.1 for iOS are now available and address a weak cryptography issue.
a4e134fb7437ffb40c56bec9fd86b2f2Cisco Security Response - Several researchers have reported on the use of Smart Install (SMI) protocol messages toward Smart Install clients, also known as integrated branch clients (IBC), allowing an unauthenticated, remote attacker to change the startup-config file and force a reload of the device, upgrade the IOS image on the device, and execute high-privilege CLI commands on switches running Cisco IOS and IOS XE Software. Cisco does not consider this a vulnerability in Cisco IOS, IOS XE, or the Smart Install feature itself but a misuse of the Smart Install protocol that by design does not require authentication.
c96bbaa757e47e6830e465936de741d3Mac OS / iOS kernels suffers from a use-after-free due to a lack of locking in host_self_trap.
e6dd7511ecf6e7b1f1bde561746ef30dMac OS and iOS kernels suffer from a memory corruption vulnerability due to a userspace pointer being used as a length.
38ee3a8bb57ecdf0e2a597bcb350fd9fMac OS / iOS kernels suffer from a use-after-free due to a failure to take reference in IOService::matchPassive.
e669deea1d2cdd39e0dcb1090e39f7ce
© 2016 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed