CVE-2015-7988 The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vector...
CriticalCVSS 9.8
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphone os | >= 9.0, < 9.1 | 9.1 |
| apple mac os x | >= 10.9, < 10.9.5 | 10.9.5 |
| apple mac os x | >= 10.10.0, < 10.10.5 | 10.10.5 |
| apple mac os x | >= 10.11.0, < 10.11.1 | 10.11.1 |
| apple watchOS | < 2.1 | 2.1 |
| apple airport base station firmware | >= 7.6, < 7.6.7 | 7.6.7 |
| apple airport base station firmware | >= 7.7, < 7.7.7 | 7.7.7 |
| apple mdnsresponder | < 625.41.2 | 625.41.2 |
References
- VU#143335 third-party-advisory us-government-resource
- www.oracle.com third-party-advisory
- 1036181 third-party-advisory vdb-entry
- support.apple.com vendor-advisory