6.1
CVE-2011-2391
- EPSS 1.24%
- Veröffentlicht 19.09.2013 10:27:53
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU consumption) via crafted ICMPv6 packets.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.24% | 0.652 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.1 | 6.5 | 6.9 |
AV:A/AC:L/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
http://secunia.com/advisories/54886
http://support.apple.com/kb/HT5934
http://www.securitytracker.com/id/1029054
http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html
http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
http://osvdb.org/97438
http://support.apple.com/HT204244
http://support.apple.com/kb/HT6441
http://support.apple.com/kb/HT6442
https://exchange.xforce.ibmcloud.com/vulnerabilities/87222
https://support.apple.com/kb/HT6535