CVE-2015-5757

Name of the Vulnerable Software and Affected Versions libpthread in Apple iOS versions prior to 8.4.1 libpthread in Apple OS X versions prior to 10.10.5

Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption. This can be achieved via an app that uses a crafted syscall to interfere with locking. The vulnerability is caused by a buffer overflow in the libpthread library. Exploitation may enable a remote attacker to execute arbitrary code in a privileged context or cause a denial of service using a specially crafted application that utilizes a system call to the locking interface.

Recommendations For iOS versions prior to 8.4.1, update to version 8.4.1 or later. For OS X versions prior to 10.10.5, update to version 10.10.5 or later.