CVE-2015-7760

medium

Description

libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attackers to cause a denial of service (resource consumption) by repeatedly connecting to the SSH port, a different vulnerability than CVE-2015-7761.

References

http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html

https://support.apple.com/HT205267

http://www.securitytracker.com/id/1033703

Details

Source: Mitre, NVD

Published: 2015-10-09

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium