A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position can modify driver state.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Wifi | — | Upgrade macOS to the latest versionApply OS X security update 2019-002 High Sierra | Apr 16, 2019 | Apr 16, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade cluster-network-kmp-default | May 21, 2019 | May 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub