4.3

CVE-2011-3441

libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AppleiPhone OS Version <= 5.0
AppleiPhone OS Version1.0
AppleiPhone OS Version1.0.0
AppleiPhone OS Version1.0.1
AppleiPhone OS Version1.0.1 Update- Editioniphone
AppleiPhone OS Version1.0.2
AppleiPhone OS Version1.0.2 Update- Editioniphone
AppleiPhone OS Version1.1
AppleiPhone OS Version1.1.0
AppleiPhone OS Version1.1.0 Update- Editioniphone
AppleiPhone OS Version1.1.0 Update- Editionipodtouch
AppleiPhone OS Version1.1.1
AppleiPhone OS Version1.1.1 Update- Editioniphone
AppleiPhone OS Version1.1.2
AppleiPhone OS Version1.1.2 Update- Editioniphone
AppleiPhone OS Version1.1.2 Update- Editionipodtouch
AppleiPhone OS Version1.1.3
AppleiPhone OS Version1.1.3 Update- Editioniphone
AppleiPhone OS Version1.1.3 Update- Editionipodtouch
AppleiPhone OS Version1.1.4
AppleiPhone OS Version1.1.4 Update- Editioniphone
AppleiPhone OS Version1.1.4 Update- Editionipodtouch
AppleiPhone OS Version1.1.5
AppleiPhone OS Version1.1.5 Update- Editioniphone
AppleiPhone OS Version1.1.5 Update- Editionipodtouch
AppleiPhone OS Version2.0
AppleiPhone OS Version2.0.0
AppleiPhone OS Version2.0.0 Update- Editioniphone
AppleiPhone OS Version2.0.0 Update- Editionipodtouch
AppleiPhone OS Version2.0.1
AppleiPhone OS Version2.0.1 Update- Editioniphone
AppleiPhone OS Version2.0.1 Update- Editionipodtouch
AppleiPhone OS Version2.0.2
AppleiPhone OS Version2.0.2 Update- Editioniphone
AppleiPhone OS Version2.0.2 Update- Editionipodtouch
AppleiPhone OS Version2.1
AppleiPhone OS Version2.1 Update- Editioniphone
AppleiPhone OS Version2.1 Update- Editionipodtouch
AppleiPhone OS Version2.1.1
AppleiPhone OS Version2.2
AppleiPhone OS Version2.2 Update- Editioniphone
AppleiPhone OS Version2.2 Update- Editionipodtouch
AppleiPhone OS Version2.2.1
AppleiPhone OS Version2.2.1 Update- Editioniphone
AppleiPhone OS Version2.2.1 Update- Editionipodtouch
AppleiPhone OS Version3.0
AppleiPhone OS Version3.0 Update- Editioniphone
AppleiPhone OS Version3.0 Update- Editionipodtouch
AppleiPhone OS Version3.0.1
AppleiPhone OS Version3.0.1 Update- Editioniphone
AppleiPhone OS Version3.0.1 Update- Editionipodtouch
AppleiPhone OS Version3.1
AppleiPhone OS Version3.1 Update- Editioniphone
AppleiPhone OS Version3.1 Update- Editionipodtouch
AppleiPhone OS Version3.1.2
AppleiPhone OS Version3.1.2 Update- Editioniphone
AppleiPhone OS Version3.1.2 Update- Editionipodtouch
AppleiPhone OS Version3.1.3
AppleiPhone OS Version3.1.3 Update- Editioniphone
AppleiPhone OS Version3.1.3 Update- Editionipodtouch
AppleiPhone OS Version3.2
AppleiPhone OS Version3.2 Update- Editioniphone
AppleiPhone OS Version3.2 Update- Editionipodtouch
AppleiPhone OS Version3.2.1
AppleiPhone OS Version3.2.1 Update- Editionipad
AppleiPhone OS Version3.2.2
AppleiPhone OS Version3.2.2 Update- Editionipad
AppleiPhone OS Version4.0
AppleiPhone OS Version4.0 Update- Editioniphone
AppleiPhone OS Version4.0 Update- Editionipodtouch
AppleiPhone OS Version4.0.1
AppleiPhone OS Version4.0.1 Update- Editioniphone
AppleiPhone OS Version4.0.1 Update- Editionipodtouch
AppleiPhone OS Version4.0.2
AppleiPhone OS Version4.0.2 Update- Editioniphone
AppleiPhone OS Version4.0.2 Update- Editionipodtouch
AppleiPhone OS Version4.1
AppleiPhone OS Version4.2
AppleiPhone OS Version4.2.1
AppleiPhone OS Version4.2.5
AppleiPhone OS Version4.2.8
AppleiPhone OS Version4.2.9
AppleiPhone OS Version4.3.0
AppleiPhone OS Version4.3.1
AppleiPhone OS Version4.3.2
AppleiPhone OS Version4.3.3
AppleiPhone OS Version4.3.4
AppleiPhone OS Version4.3.5
AppleiPhone OS Version4.3.5 Update- Editionipad
AppleiPhone OS Version4.3.5 Update- Editionipodtouch
AppleiPhone OS Version5.0 Update- Editionipad
AppleiPhone OS Version5.0 Update- Editioniphone
AppleiPhone OS Version5.0 Update- Editionipodtouch
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.613
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.