PT-2015-2118

CVE-2015-5879

·

Published

2015-09-18

·

Updated

2016-12-22

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions XNU in Apple iOS versions prior to 9
Description The issue is related to the improper validation of TCP packet headers, which can be exploited by remote attackers to disrupt TCP connections, causing a denial of service. This is achieved by sending a crafted TCP packet header. The estimated number of potentially affected devices is not specified.
Recommendations For versions prior to 9, update to a version 9 or later to resolve the issue. As a temporary workaround, consider restricting network access to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾