Vulnerabilities

TI-2019-06164 CVE-2019-8588 · GHSA-4p49-59gq-x3fh

NULL pointer dereference in Apple AirPort Base Station Firmware Update

LOW 37

A null pointer dereference was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01836 Published 2020-10-27 Fixed in 7.9, 7.8 CWE-476

TI-2019-06157 CVE-2019-8581 · GHSA-mjm5-4fpc-477f

Out-of-bounds read in Apple AirPort Base Station Firmware Update

MEDIUM 46

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01808 Published 2020-10-27 Fixed in 7.9, 7.8 CWE-125

TI-2019-06156 CVE-2019-8580 · GHSA-7gvq-p4h3-4v6r

Source-routed IPv4 packets were disabled by default.

LOW 35

Source-routed IPv4 packets were disabled by default.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01051 Published 2020-10-27 Fixed in 7.9, 7.8

TI-2019-06154 CVE-2019-8578 · GHSA-4376-93v6-4h5m

Use after free in Apple AirPort Base Station Firmware Update

MEDIUM 47

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02716 Published 2020-10-27 Fixed in 7.9, 7.8 CWE-416

TI-2019-06148 CVE-2019-8572 · GHSA-r8cr-jgjj-w74h

NULL pointer dereference in Apple AirPort Base Station Firmware Update

MEDIUM 47

A null pointer dereference was addressed with improved input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02739 Published 2020-10-27 Fixed in 7.9, 7.8 CWE-476

TI-2019-06151 CVE-2019-8575 · GHSA-63q4-jcgf-q39h

Apple AirPort Base Station Firmware Update: A base station factory reset may not delete…

LOW 35

The issue was addressed with improved data deletion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01226 Published 2020-10-27 Fixed in 7.9, 7.8

TI-2019-05181 CVE-2019-7291 · GHSA-8r97-62cf-rx47

Apple AirPort Base Station Firmware Update: An attacker in a privileged position may be…

LOW 31

A denial of service issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01116 Published 2020-10-27 Fixed in 7.9, 7.8

TI-2015-05861 CVE-2015-7029 · GHSA-4rvm-q95x-rjfh

Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x before 7.7.7 misparses DNS…

MEDIUM 49

Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x before 7.7.7 misparses DNS data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03926 Published 2016-07-03 No fix listed CWE-119

TI-2015-06638 CVE-2015-7988 · GHSA-wj37-2wrq-j2mg

The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote…

MEDIUM 50

The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04821 Published 2016-06-26 No fix listed

TI-2015-06637 CVE-2015-7987 · GHSA-fw6g-vx3h-m7pr

Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read…

MEDIUM 47

Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02513 Published 2016-06-26 No fix listed CWE-119

TI-2013-04455 CVE-2013-5132 · GHSA-x9xp-v54h-f3gp

Apple AirPort Base Station Firmware before 7.6.4 does not properly handle incorrect frame…

LOW 27

Apple AirPort Base Station Firmware before 7.6.4 does not properly handle incorrect frame lengths, which allows remote attackers to cause a denial of service (device crash) by associating with the access point and then s…

CVSS 2.0MEDIUM 5.4 Network No auth Interaction — EPSS 0.0107 Published 2013-09-08 No fix listed CWE-189

Vulnerabilities

Filters