CVE-2015-1102

Published: Apr 10, 2015Modified: May 6, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly handle TCP headers, which allows man-in-the-middle attackers to cause a denial of service via unspecified vectors.

Affected (3)

Products: Apple: Mac Os X, Iphone Os, Tvos

3 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Up to 10.10.2

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 8.2

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Apple Tvos	Up to 7.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html

Source: product-security@apple.com

Vendor Advisory

http://www.securitytracker.com/id/1032048

Source: product-security@apple.com

https://support.apple.com/HT204659

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT204661

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT204662

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT204870

Source: product-security@apple.com

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html