CVE-2015-1105

no score yetEPSS 9.0%

The TCP implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly implement the Urgent (aka out-of-band data) mechanism, which allows remote attackers to cause a denial of service via crafted packets.

EPSS: 9.0% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2015-04-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:iphone_os
apple:mac_os_x
apple:tvos

References

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html
http://www.securitytracker.com/id/1032048
https://support.apple.com/HT204659

Check your stack JSON