PT-2015-2290

CVE-2015-5893

Published

2015-10-09

Updated

2016-12-08

Description by

CVSS 2.0

2.1

Low

MetricsAV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11

Description The issue is related to the SMBClient component in Apple OS X, which lacks protection of service data. This allows a local attacker to potentially obtain sensitive kernel memory-layout information. The vulnerability can be exploited by a local user to access protected information in the kernel memory.

Recommendations For Apple OS X versions prior to 10.11, update to version 10.11 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Ilja Van Sprundel

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers

CVE-2015-5893