Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Dennis Spindel Ljungmark

#55710of 56,336
3.3Total CVSS
Vulnerabilities · 1
PT-2015-2115
3.3
2015-09-18
Apple · Ios · CVE-2015-5869
**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9 **Description** The issue is related to the implementation of the Neighbor Discovery (ND) protocol in the IPv6 stack, which allows remote attackers to reconfigure a hop-limit setting via a small hop limit value in a Router Advertisement (RA) message. This is due to insufficient input validation in the protocol implementation. Exploitation of this issue may allow an attacker to modify parameters of the data transmission mechanism. **Recommendations** For Apple iOS versions prior to 9, update to version 9 or later to resolve the issue. As a temporary workaround, consider restricting access to Router Advertisement messages to minimize the risk of exploitation. Avoid using small hop limit values in RA messages until the issue is resolved.