2 lines
3.0 KiB
JSON
2 lines
3.0 KiB
JSON
{"affected":[{"affectedData":[{"product":"iOS","vendor":"Apple","versions":[{"lessThan":"12.1","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"tvOS","vendor":"Apple","versions":[{"lessThan":"12.1","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"product-security@apple.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"1FDA8399-DFA9-41CA-BB94-A5419A9518EE","versionEndExcluding":"12.1","vulnerable":true},{"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","matchCriteriaId":"0B534B9B-7B04-4047-B9B7-C5B516123D52","versionEndExcluding":"12.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A resource exhaustion issue was addressed with improved input validation. This issue is fixed in tvOS 12.1, iOS 12.1. Processing a maliciously crafted message may lead to a denial of service."},{"lang":"es","value":"Se abordó un problema de agotamiento de recursos con una comprobación de entrada mejorada.  Este problema se corrigió en tvOS versión 12.1, iOS versión 12.1. El procesamiento de un mensaje diseñado maliciosamente puede conllevar a una denegación de servicio"}],"id":"CVE-2018-4381","lastModified":"2026-06-17T01:58:53.167","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-10-27T20:15:13.437","references":[{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT209192"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT209194"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT209192"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/en-us/HT209194"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"nvd@nist.gov","type":"Primary"}]}
|