VulnerabilityModified

CVE-2015-5869

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.

LOW 3.3EPSS 0.91%

Does this matter?

Lower severity and a low EPSS score (0.91%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 3.3 LOWAV:A/AC:L/Au:N/C:N/I:P/A:N
EPSS: 0.91% probability · 58th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: apple/mac os x · apple/iphone os · apple/watchos
Source: product-security@apple.com

References

http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlVendor Advisory
http://openwall.com/lists/oss-security/2015/04/04/2
http://www.securityfocus.com/bid/76764
http://www.securitytracker.com/id/1033609
https://support.apple.com/HT205212Vendor Advisory
https://support.apple.com/HT205213Vendor Advisory
https://support.apple.com/HT205267Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlVendor Advisory
http://openwall.com/lists/oss-security/2015/04/04/2
http://www.securityfocus.com/bid/76764
http://www.securitytracker.com/id/1033609
https://support.apple.com/HT205212Vendor Advisory
https://support.apple.com/HT205213Vendor Advisory
https://support.apple.com/HT205267Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.