Lucene search

K
cve[email protected]CVE-2015-3722
HistoryJul 03, 2015 - 2:00 a.m.

CVE-2015-3722

2015-07-0302:00:13
CWE-254
web.nvd.nist.gov
22
apple
ios
pre-8.4
denial of service
crafted universal provisioning
nvd
cve-2015-3722

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

5.6

Confidence

Low

EPSS

0.004

Percentile

71.9%

Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service (ID collision and launch outage) via a crafted universal provisioning profile app.

Affected configurations

NVD
Node
appleiphone_osRange8.3
VendorProductVersionCPE
appleiphone_oscpe:/o:apple:iphone_os::::

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

5.6

Confidence

Low

EPSS

0.004

Percentile

71.9%