← Back

CVE-2014-4422

nvd nist
Published: Sep 18, 2014Modified: May 6, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: NVD

Description

The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process, which allows attackers to bypass certain kernel-hardening protection mechanisms by using a user-space process to observe data related to the random numbers.

Affected (17)

Products: Apple: Tvos, Iphone Os
Apple
2 products
Tvos
Iphone Os
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Tvos
Up to 6.2
Tvos
Version 6.0.1
Tvos
Version 6.0.2
Tvos
Version 6.0
Tvos
Version 6.1.1
Tvos
Version 6.1.2
Tvos
Version 6.1
Configuration B
10 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Iphone Os
Up to 7.1.2
Iphone Os
Version 7.0.1
Iphone Os
Version 7.0.2
Iphone Os
Version 7.0.3
Iphone Os
Version 7.0.4
Iphone Os
Version 7.0.5
Iphone Os
Version 7.0.6
Iphone Os
Version 7.0
Iphone Os
Version 7.1.1
Iphone Os
Version 7.1

Related CWEs

CWE-310
CWE-310

References (20)

Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Source: product-security@apple.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.