CVE-2015-7987: Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1)…

Description

Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3ResourceRecord function.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)2.5% · higher than 85% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

IO

iOS · Apple

9.0 before 9.1 · source: NVD

AB

Airport Base Station Firmware · Apple

7.6 before 7.6.7; 7.7 before 7.7.7 · source: NVD

MO

Mac OS X · Apple

10.9 before 10.9.5; 10.10.0 before 10.10.5; 10.11.0 before 10.11.1 · source: NVD

MD

Mdnsresponder · Apple

before 625.41.2 · source: NVD

WA

Watchos · Apple

before 2.1 · source: NVD