PT-2013-5388
CVE-2013-5142
·
Published
2013-09-19
·
Updated
2013-10-31
Description by
CVSS 2.0
4.9
MediumMetricsAV:L/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 7
Description
The issue concerns the kernel in Apple iOS, which fails to initialize certain kernel data structures properly. This allows local users to access sensitive information from kernel stack memory. The exploitation can occur via the (1)
msgctl API or (2) segctl API.Recommendations
For versions prior to 7, update to version 7 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾