PT-2015-2290

CVE-2015-5893

Publicado

2015-10-09

Atualizado

2016-12-08

Descrição por

CVSS 2.0

2.1

Baixa

MétricasAV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11

Description The issue is related to the SMBClient component in Apple OS X, which lacks protection of service data. This allows a local attacker to potentially obtain sensitive kernel memory-layout information. The vulnerability can be exploited by a local user to access protected information in the kernel memory.

Recommendations For Apple OS X versions prior to 10.11, update to version 10.11 or later to resolve the issue.

Explorabilidade

Correção

Impactos

Pesquisadores

Ilja Van Sprundel

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Identificadores relacionados

CVE-2015-5893