CVE-2018-4429
published 2019-04-03CVE-2018-4429: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1…
PriorityP427medium6.5CVSS 3.0
AVNACLPRNUIRSUCNIHAN
EPSS
0.78%
52.4th percentile
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | iphone_os | < 12.1.1 | 12.1.1 |
| apple | watchos | < 5.1.2 | 5.1.2 |
| apple | watchos | — | — |
| libtirpc_project | libtirpc | >= 0 < 0.2.2-5ubuntu2.1 | 0.2.2-5ubuntu2.1 |
| libtirpc_project | libtirpc | >= 0 < 0.2.5-1ubuntu0.1 | 0.2.5-1ubuntu0.1 |
| libtirpc_project | libtirpc | >= 0 < 0.2.5-1.2ubuntu0.1 | 0.2.5-1.2ubuntu0.1 |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2018-4429: watchOS 5.1.2
vendor_apple·2018-12-06·CVSS 6.5
CVE-2018-4429 [MEDIUM] CVE-2018-4429: watchOS 5.1.2
Apple Security Update: About the security content of watchOS 5.1.2
Product: watchOS
Version: 5.1.2
CVE: CVE-2018-4429
Component: LinkPresentation
Impact: Processing a maliciously crafted email may lead to user interface spoofing
Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.
Apple
CVE-2018-4429: iOS 12.1.1
vendor_apple·2018-12-05·CVSS 6.5
CVE-2018-4429 [MEDIUM] CVE-2018-4429: iOS 12.1.1
Apple Security Update: About the security content of iOS 12.1.1
Product: iOS
Version: 12.1.1
CVE: CVE-2018-4429
Component: LinkPresentation
Impact: Processing a maliciously crafted email may lead to user interface spoofing
Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.
GHSA
GHSA-v2p2-x547-vr26: A spoofing issue existed in the handling of URLs
ghsa_unreviewed·2022-05-14
CVE-2018-4429 [MEDIUM] CWE-20 GHSA-v2p2-x547-vr26: A spoofing issue existed in the handling of URLs
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2.
OSV
libtirpc vulnerabilities
osv·2018-09-05·CVSS 5.9
CVE-2016-4429 libtirpc vulnerabilities
libtirpc vulnerabilities
Aldy Hernandez discovered that libtirpc incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2016-4429)
It was discovered that libtirpc incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-14622)
It was discovered that libtirpc incorrectly handled certain strings.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2017-8779)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-04-03
Published