CVE

Id
71667  
CVE No.
CVE-2014-4371  
Status
Candidate  
Description
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4419, CVE-2014-4420, and CVE-2014-4421.  
Phase
Assigned (20140620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
680855 71667 CVE-2014-4371 CONFIRM:https://support.apple.com/kb/HT6535  View
680856 71667 CVE-2014-4371 CONFIRM:http://support.apple.com/HT204244  View
680857 71667 CVE-2014-4371 CONFIRM:http://support.apple.com/kb/HT6441  View
680858 71667 CVE-2014-4371 CONFIRM:http://support.apple.com/kb/HT6442  View
680859 71667 CVE-2014-4371 APPLE:APPLE-SA-2014-09-17-1  View
680860 71667 CVE-2014-4371 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html  View
680861 71667 CVE-2014-4371 APPLE:APPLE-SA-2014-09-17-2  View
680862 71667 CVE-2014-4371 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html  View
680863 71667 CVE-2014-4371 APPLE:APPLE-SA-2014-10-16-1  View
680864 71667 CVE-2014-4371 URL:http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html  View
680865 71667 CVE-2014-4371 APPLE:APPLE-SA-2015-01-27-4  View
680866 71667 CVE-2014-4371 URL:http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html  View
680867 71667 CVE-2014-4371 BID:69882  View
680868 71667 CVE-2014-4371 URL:http://www.securityfocus.com/bid/69882  View
680869 71667 CVE-2014-4371 BID:69919  View
680870 71667 CVE-2014-4371 URL:http://www.securityfocus.com/bid/69919  View
680871 71667 CVE-2014-4371 SECTRACK:1030866  View
680872 71667 CVE-2014-4371 URL:http://www.securitytracker.com/id/1030866  View
680873 71667 CVE-2014-4371 XF:appleios-cve20144371-info-disc(96100)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15434 JVNDB-2014-004309 複数の Apple 製品の不特定の IOHIDFamily 機能における重要な情報を取得される脆弱性 複数の Apple 製品の不特定の IOHIDFamily 機能は、カーネルポインタの読み出しを制限するための適切なチェックが不足しているため、ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2014-4379 71667 7.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004309.html  View