NVD

Id
23485  
Name
CVE-2015-1099  
Description
Race condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service via a crafted app.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2015-04-10  
Modified Date
2016-12-07  
Seq
2015-1099  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
124406 23485 CVE-2015-1099 APPLE-SA-2015-04-08-2  View
124407 23485 CVE-2015-1099 APPLE-SA-2015-04-08-3  View
124408 23485 CVE-2015-1099 APPLE-SA-2015-04-08-4  View
124409 23485 CVE-2015-1099 1032048  View
124410 23485 CVE-2015-1099 https://support.apple.com/HT204659  View
124411 23485 CVE-2015-1099 https://support.apple.com/HT204661  View
124412 23485 CVE-2015-1099 https://support.apple.com/HT204662  View
124413 23485 CVE-2015-1099 https://support.apple.com/kb/HT204870  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6855 JVNDB-2015-002175 複数の Apple 製品のカーネルの setreuid system-call の実装におけるサービス運用妨害 (DoS) の脆弱性 Apple iOS、Apple OS X、および Apple TV のカーネルの setreuid system-call の実装には、競合状態により、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2015-1099 78324 CVE-2015-1099 23485 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002175.html 2015-04-08 2015-05-25 View