6.5

CVE-2018-4409

A resource exhaustion issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, tvOS 12.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Safari Version < 12.0.1
Apple ≫ iPhone OS Version < 12.1
Apple ≫ tvOS Version < 12.1
Apple ≫ iCloud Version < 7.8
   Microsoft ≫ Windows Version -
Apple ≫ iTunes Version < 12.9.1
   Microsoft ≫ Windows Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.64% 0.733
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://support.apple.com/kb/HT209192
Vendor Advisory
https://support.apple.com/kb/HT209194
Vendor Advisory
https://support.apple.com/kb/HT209196
Vendor Advisory
https://support.apple.com/kb/HT209197
Vendor Advisory
https://support.apple.com/kb/HT209198
Vendor Advisory