CVE-2014-4421

Published: Sep 18, 2014Modified: May 6, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371, CVE-2014-4419, and CVE-2014-4420.

Affected (18)

Products: Apple: Mac Os X, Iphone Os, Tvos

3 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Up to 10.10.1

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 7.1.2
Apple Iphone Os	Version 7.0.1
Apple Iphone Os	Version 7.0.2
Apple Iphone Os	Version 7.0.3
Apple Iphone Os	Version 7.0.4
Apple Iphone Os	Version 7.0.5
Apple Iphone Os	Version 7.0.6
Apple Iphone Os	Version 7.0
Apple Iphone Os	Version 7.1.1
Apple Iphone Os	Version 7.1

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Apple Tvos	Up to 6.2
Apple Tvos	Version 6.0.1
Apple Tvos	Version 6.0.2
Apple Tvos	Version 6.0
Apple Tvos	Version 6.1.1
Apple Tvos	Version 6.1.2
Apple Tvos	Version 6.1

References (24)

http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html

Source: product-security@apple.com

http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html

Source: product-security@apple.com

http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html

Source: product-security@apple.com

http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html

Source: product-security@apple.com

http://support.apple.com/HT204244

Source: product-security@apple.com

http://support.apple.com/kb/HT6441

Source: product-security@apple.com

http://support.apple.com/kb/HT6442

Source: product-security@apple.com

http://www.securityfocus.com/bid/69882

Source: product-security@apple.com

http://www.securityfocus.com/bid/69924

Source: product-security@apple.com

http://www.securitytracker.com/id/1030866

Source: product-security@apple.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/96103

Source: product-security@apple.com

https://support.apple.com/kb/HT6535

Source: product-security@apple.com

http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/HT204244

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT6441

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT6442

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/69882

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/69924

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030866

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/96103

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT6535

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.