CVE-2018-4241

HOCH 7.8CVE-2018-4241 · Published 08/06/2018 · updated 17/06/2026

Kurz gesagt

CVE-2018-4241 ist eine Schwachstelle (HOCH (CVSS 7.8)) in apple tv (apple).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 8.0%, höher als bei 94.7% aller Schwachstellen.
Abhilfe: auf 11.4 oder neuer aktualisieren.

Package	Affected versions	Patched versions
apple tv apple	`< 11.4`	`11.4`

Description

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcp_usr_connectx allows attackers to execute arbitrary code in a privileged context via a crafted app.

References

securitytracker.com/id/1041027 · Third Party Advisory
bugs.chromium.org/p/project-zero/issues/detail · Exploit
support.apple.com/HT208848 · Vendor Advisory
support.apple.com/HT208849 · Vendor Advisory
support.apple.com/HT208850 · Vendor Advisory
support.apple.com/HT208851 · Vendor Advisory
exploit-db.com/exploits/44849 · Exploit

Weitere Schwachstellen in apple tv

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

apple tv

apple

< 11.4

11.4

Description

Weitere Schwachstellen in apple tv

Alle anzeigen →