CVE-2018-4413medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.
References
https://support.apple.com/kb/HT209192
https://support.apple.com/kb/HT209193
Details
Source: MITRE
Published: 2019-04-03
Updated: 2019-04-05
Type: CWE-119
Risk Information
CVSS v2
Base Score: 7.1
Vector: AV:N/AC:M/Au:N/C:C/I:N/A:N
Impact Score: 6.9
Exploitability Score: 8.6
Severity: HIGH
CVSS v3
Base Score: 5.5
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 700554 | Apple iOS < 12.1 Multiple Vulnerabilities | Nessus Network Monitor | Mobile Devices | medium |
| 700519 | macOS 10.14.x < 10.14.1 Multiple Vulnerabilities | Nessus Network Monitor | Operating System Detection | high |
| 118712 | Apple TV < 12.1 Multiple Vulnerabilities | Nessus | Misc. | high |
| 118575 | macOS 10.13.6 Multiple Vulnerabilities (Security Update 2018-002) | Nessus | MacOS X Local Security Checks | critical |
| 118574 | macOS 10.14.x < 10.14.1 Multiple Vulnerabilities | Nessus | MacOS X Local Security Checks | high |
| 118573 | macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-005) | Nessus | MacOS X Local Security Checks | critical |
| 118569 | Apple iOS < 12.1 Multiple Vulnerabilities | Nessus | Mobile Devices | high |