NVD

Id
25340  
Name
CVE-2015-3693  
Description
Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service (memory corruption), by triggering certain patterns of access to memory locations.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-02  
Modified Date
2016-12-05  
Seq
2015-3693  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
134076 25340 CVE-2015-3693 http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html  View
134077 25340 CVE-2015-3693 APPLE-SA-2015-06-30-2  View
134078 25340 CVE-2015-3693 APPLE-SA-2015-06-30-3  View
134079 25340 CVE-2015-3693 http://support.apple.com/kb/HT204934  View
134080 25340 CVE-2015-3693 http://support.apple.com/kb/HT204942  View
134081 25340 CVE-2015-3693 75495  View
134082 25340 CVE-2015-3693 1032444  View
134083 25340 CVE-2015-3693 1032755  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8079 JVNDB-2015-003399 Apple OS X などの製品で使用される Apple Mac EFI における row-hammer 攻撃を実行される脆弱性 Apple OS X およびその他の製品で使用される Apple Mac EFI は、DDR3 RAM のリフレッシュレートを適切に設定しないため、row-hammer 攻撃を実行され、その結果、権限を取得される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-3693 80918 CVE-2015-3693 25340 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003399.html 2015-06-30 2015-07-08 View