Page 2 of 11 results (0.003 seconds)

CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0

A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution. Se abordó una desreferencia de puntero null con una comprobación de entrada mejorada. Este problema se corrigió en AirPort Base Station Firmware Update versión 7.8.1, AirPort Base Station Firmware Update versión 7.9.1. • https://support.apple.com/en-us/HT210090 https://support.apple.com/en-us/HT210091 • CWE-476: NULL Pointer Dereference •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. An attacker in a privileged position may be able to perform a denial of service attack. Se abordó un problema de denegación de servicio con un manejo de la memoria mejorada.  Este problema se corrigió en AirPort Base Station Firmware Update versión 7.8.1, AirPort Base Station Firmware Update versión 7.9.1. • https://support.apple.com/en-us/HT210090 https://support.apple.com/en-us/HT210091 •

CVSS: 9.8EPSS: 1%CPEs: 9EXPL: 0

Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3ResourceRecord function. Múltiples desbordamientos de buffer en mDNSResponder en versiones anteriores a 625.41.2 permiten a atacantes remotos leer o escribir en posiciones de memoria fuera de los límites a través de vectores implicando la función (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import o (4) CopyNSEC3ResourceRecord. • http://www.kb.cert.org/vuls/id/143335 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html http://www.securityfocus.com/bid/91323 http://www.securitytracker.com/id/1036181 https://support.apple.com/HT206846 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.8EPSS: 1%CPEs: 9EXPL: 0

The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors. La función handle_regservice_request en mDNSResponder en versiones anteriores a 625.41.2 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (referencia a puntero NULL) a través de vectores no especificados. • http://www.kb.cert.org/vuls/id/143335 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html http://www.securitytracker.com/id/1036181 https://support.apple.com/HT206846 •

CVSS: 10.0EPSS: 1%CPEs: 3EXPL: 0

Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x before 7.7.7 misparses DNS data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Apple AirPort Base Station Firmware en versiones anteriores a 7.6.7 y 7.7.x en versiones anteriores a 7.7.7 no analiza datos DNS, lo que permite a atacantes remotos ejecutar un código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de vectores no especificados. • http://lists.apple.com/archives/security-announce/2016/Jun/msg00000.html http://www.securitytracker.com/id/1036136 https://support.apple.com/HT206849 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •