Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Buffer Overflow
Iphone Os
Mac Os X
Watchos
Airport Base Station Firmware
+1
NVD
CVSS 3.0
9.8
EPSS
3.1%
The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
RCE
Denial Of Service
Iphone Os
Mac Os X
Watchos
+2
NVD
CVSS 3.0
9.8
EPSS
2.6%