cve.bz

apple mac os x vulnerabilities, newest first, page 19

Filter
  1. 7.5CVE-2018-14469EPSS 5.3%

    The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().

  2. 7.5CVE-2018-14468EPSS 4.0%

    The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().

  3. 7.5CVE-2018-14467EPSS 4.0%

    The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).

  4. 7.5CVE-2018-14466EPSS 4.0%

    The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().

  5. 7.5CVE-2018-14465EPSS 4.1%

    The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().

  6. 7.5CVE-2018-14464EPSS 4.0%

    The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().

  7. 7.5CVE-2018-14463EPSS 4.7%

    The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.

  8. 7.5CVE-2018-14462EPSS 4.0%

    The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().

  9. 7.5CVE-2018-14461EPSS 4.0%

    The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().

  10. 8.1CVE-2019-9506EPSS 2.7%

    The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka …

  11. 7.1CVE-2019-11042EPSS 4.4%

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to…

  12. 7.1CVE-2019-11041EPSS 4.4%

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to…

  13. 7.5CVE-2019-13565EPSS 5.0%

    An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied …

  14. 4.9CVE-2019-13057EPSS 6.6%

    An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd d…

  15. 5.3CVE-2019-13118EPSS 5.1%

    In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack…

  16. 3.3CVE-2018-4470EPSS 0.7%

    A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected versions prior to macOS High Sierra 10.13.6.

  17. 7.8CVE-2018-4465EPSS 0.8%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

  18. 7.8CVE-2018-4463EPSS 0.8%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.

  19. 5.5CVE-2018-4462EPSS 0.7%

    A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.2.

  20. 7.8CVE-2018-4461EPSS 1.1%

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

  21. 6.5CVE-2018-4460EPSS 1.5%

    A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

  22. 7.8CVE-2018-4456EPSS 1.1%

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6, macOS Mojave 10.14.

  23. 7.8CVE-2018-4450EPSS 0.8%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.

  24. 7.8CVE-2018-4449EPSS 1.0%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.

  25. 7.8CVE-2018-4447EPSS 1.1%

    A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

  26. 7.8CVE-2018-4435EPSS 3.1%

    A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

  27. 7.1CVE-2018-4434EPSS 0.3%

    An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.2.

  28. 5.5CVE-2018-4431EPSS 0.7%

    A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

  29. 7.8CVE-2018-4427EPSS 1.1%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to: iOS 12.1, watchOS 5.1.2, tvOS 12.1.1, macOS High Sierra 10.13.6 Security Update 2018-003 High Sierra, macOS Sierra 10.12.6 Securi…

  30. 7.8CVE-2018-4426EPSS 1.1%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

  31. 7.8CVE-2018-4425EPSS 1.1%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

  32. 7.8CVE-2018-4424EPSS 0.9%

    A buffer overflow was addressed with improved size validation. This issue affected versions prior to macOS Mojave 10.14.1.

  33. 7.8CVE-2018-4423EPSS 0.9%

    A logic issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.1.

  34. 8.8CVE-2018-4422EPSS 1.4%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

  35. 7.8CVE-2018-4421EPSS 0.9%

    A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

  36. 7.8CVE-2018-4420EPSS 1.1%

    A memory corruption issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

  37. 7.8CVE-2018-4419EPSS 1.1%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

  38. 5.5CVE-2018-4418EPSS 0.8%

    A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.

  39. 5.5CVE-2018-4417EPSS 0.8%

    A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.

  40. 7.8CVE-2018-4415EPSS 1.2%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

  41. 7.8CVE-2018-4414EPSS 1.1%

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  42. 5.5CVE-2018-4413EPSS 1.1%

    A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

  43. 7.8CVE-2018-4412EPSS 1.1%

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  44. 7.8CVE-2018-4411EPSS 1.1%

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.

  45. 7.8CVE-2018-4410EPSS 0.9%

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.1.

  46. 7.8CVE-2018-4408EPSS 1.1%

    A memory corruption issue was addressed with improved input validation This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

  47. 8.8CVE-2018-4407EPSS 21%

    A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

  48. 6.5CVE-2018-4406EPSS 1.1%

    A denial of service issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.

  49. 5.5CVE-2018-4403EPSS 0.7%

    This issue was addressed by removing additional entitlements. This issue affected versions prior to macOS Mojave 10.14.1.

  50. 7.8CVE-2018-4402EPSS 1.0%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.