CVE-2015-7987 Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForM...
CriticalCVSS 9.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3ResourceRecord function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphone os | >= 9.0, < 9.1 | 9.1 |
| apple mac os x | >= 10.9, < 10.9.5 | 10.9.5 |
| apple mac os x | >= 10.10.0, < 10.10.5 | 10.10.5 |
| apple mac os x | >= 10.11.0, < 10.11.1 | 10.11.1 |
| apple watchOS | < 2.1 | 2.1 |
| apple airport base station firmware | >= 7.6, < 7.6.7 | 7.6.7 |
| apple airport base station firmware | >= 7.7, < 7.7.7 | 7.7.7 |
| apple mdnsresponder | < 625.41.2 | 625.41.2 |
References
- VU#143335 third-party-advisory us-government-resource
- www.oracle.com third-party-advisory
- 91323 third-party-advisory vdb-entry
- 1036181 third-party-advisory vdb-entry
- support.apple.com vendor-advisory