Lucene search
HistoryOct 14, 2011 - 10:55 a.m.
CVE-2011-3259
cve-2011-3259
apple ios
apple tv
kernel
denial of service
resource consumption
memory allocation
tcp connections
vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.1 Medium
AI Score
Confidence
Low
0.032 Low
EPSS
Percentile
91.2%
The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service (resource consumption) by making many connection attempts.
Affected configurations
Node
appleapple_tvMatch4.0
ORappleapple_tvMatch4.1
ORappleapple_tvMatch4.2
ORappleapple_tvMatch4.3
Node
appleiphone_osMatch3.0-iphone
ORappleiphone_osMatch3.1
ORappleiphone_osMatch3.1-iphone
ORappleiphone_osMatch3.1-ipodtouch
ORappleiphone_osMatch3.1.2-iphone
ORappleiphone_osMatch3.1.3-iphone
ORappleiphone_osMatch3.2-iphone
ORappleiphone_osMatch3.2-ipodtouch
ORappleiphone_osMatch3.2.1
ORappleiphone_osMatch3.2.1-ipad
ORappleiphone_osMatch3.2.2
ORappleiphone_osMatch4.0
ORappleiphone_osMatch4.0-iphone
ORappleiphone_osMatch4.0-ipodtouch
ORappleiphone_osMatch4.0.1
ORappleiphone_osMatch4.0.1-iphone
ORappleiphone_osMatch4.0.1-ipodtouch
ORappleiphone_osMatch4.0.2
ORappleiphone_osMatch4.1
ORappleiphone_osMatch4.2.1
ORappleiphone_osMatch4.2.5
ORappleiphone_osMatch4.2.8
ORappleiphone_osMatch4.3.0
ORappleiphone_osMatch4.3.1
ORappleiphone_osMatch4.3.2
ORappleiphone_osMatch4.3.3
ORappleiphone_osMatch4.3.5
ORappleiphone_osMatch4.3.5-ipad
ORappleiphone_osMatch4.3.5-ipodtouch
Related
cvelist
cvelist
CVE-2011-3259
2011-10-14 10:00:00
nvd
nvd
CVE-2011-3259
2011-10-14 10:55:10
prion
prion
Design/Logic Flaw
2011-10-14 10:55:00
securityvulns
securityvulns
Apple TV multiple security vulnerabilities
2011-10-16 00:00:00
APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4
2011-10-16 00:00:00
APPLE-SA-2011-10-12-1 iOS 5 Software Update
2011-10-15 00:00:00
nessus
nessus
Apple iOS < 5.0 Multiple Vulnerabilities (BEAST)
2012-06-19 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.1 Medium
AI Score
Confidence
Low
0.032 Low
EPSS
Percentile
91.2%
Related for CVE-2011-3259