An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (persistent Safari outage) via a crafted web site.

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1.1 It is, therefore, affected by multiple vulnerabilities.

- A remote code execution vulnerability exists in WebKit due to improper memory handling.
  An unauthenticated, remote attacker can exploit this, via a specifically crafted   web page to to execute arbitrary code or cause a denial of service   (CVE-2018-4199, CVE-2018-4201, CVE-2018-4218, CVE-2018-4233).

- An information disclosure vulnerability exists in WebKit. An unauthenticated,   remote attacker can exploit this, via a specifically crafted web page,   to disclose potentially sensitive information (CVE-2018-4190).

- An out-of-bounds read error exists in WebKit due to improper input validation.
  An unauthenticated, remote attacker can exploit this, via a specifically crafted web page   that leverages a getWasmBufferFromValue  during WebAssembly compilation to execute arbitrary   code (CVE-2018-4222).

The version of Apple iOS running on the mobile device is prior to 11.4. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Type	Severity
126381	macOS : Apple Safari < 11.1.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	high
700550	Apple iOS < 11.4 Multiple Vulnerabilities (EFAIL)	Nessus Network Monitor	Mobile Devices		high
110398	Apple iOS < 11.4 Multiple Vulnerabilities (EFAIL)	Nessus	Mobile Devices	Local	high

Detections

Analytics

CVE-2018-4247

medium

Tenable Plugins

high

high

high