An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Crash Reporter" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app that replaces a privileged port name.

The version of Apple iOS running on the mobile device is prior to 11.3.1. It is, therefore, affected by multiple vulnerabilities.

According to its banner, the version of Apple TV on the remote device is prior to 11.4. It is, therefore, affected by multiple vulnerabilities as described in the HT208850 security advisory.

Note that only 4th and 5th generation models are affected by these vulnerabilities.

The remote host is running macOS 10.13.4 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components :

  - Crash Reporter
  - LinkPresentation

ID	Name	Product	Family	Type	Severity
700549	Apple iOS < 11.3.1 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices		critical
110325	Apple TV < 11.4 Multiple Vulnerabilities	Nessus	Misc.	Remote	high
109397	Apple iOS < 11.3.1 Multiple Vulnerabilities	Nessus	Mobile Devices	Local	high
109361	macOS Multiple Vulnerabilities (Security Update 2018-001)	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2018-4206

high

Tenable Plugins

critical

high

high

high