PT-2015-2118
CVE-2015-5879
·
Published
2015-09-18
·
Updated
2016-12-22
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
XNU in Apple iOS versions prior to 9
Description
The issue is related to the improper validation of TCP packet headers, which can be exploited by remote attackers to disrupt TCP connections, causing a denial of service. This is achieved by sending a crafted TCP packet header. The estimated number of potentially affected devices is not specified.
Recommendations
For versions prior to 9, update to a version 9 or later to resolve the issue. As a temporary workaround, consider restricting network access to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾