CVE-2018-4451
published 2020-10-27CVE-2018-4451: This issue is fixed in macOS Mojave 10.14. A memory corruption issue was addressed with improved input validation.
PriorityP335high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.91%
56.2th percentile
This issue is fixed in macOS Mojave 10.14. A memory corruption issue was addressed with improved input validation.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | mac_os_x | < 10.14 | 10.14 |
| apple | macos | >= unspecified < 10.14 | 10.14 |
| apple | macos_mojave | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_cisco8.6HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability
vendor_cisco·2018-09-26·CVSS 8.6
CVE-2018-0485 [HIGH] CWE-19 Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability
Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability
A vulnerability in the SM-1T3/E3 firmware on Cisco Second Generation Integrated Services Routers (ISR G2) and the Cisco 4451-X Integrated Services Router (ISR4451-X) could allow an unauthenticated, remote attacker to cause the ISR G2 Router or the SM-1T3/E3 module on the ISR4451-X to reload, resulting in a denial of service (DoS) condition on an affected device.
The vulnerability is due to improper handling of user input. An attacker could exploit this vulnerability by first connecting to the SM-1T3/E3 module console and entering a string sequence. A successful exploit could allow the attacker to cause the ISR G2 Router or the SM-1T3/E3 module on the ISR4451-X to reload, resulting in a DoS condition on
Apple
CVE-2018-4451: macOS Mojave 10.14
vendor_apple·2018-09-24·CVSS 7.8
CVE-2018-4451 [HIGH] CVE-2018-4451: macOS Mojave 10.14
Apple Security Update: About the security content of macOS Mojave 10.14
Product: macOS Mojave
Version: 10.14
CVE: CVE-2018-4451
Component: Intel Graphics Driver
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A memory corruption issue was addressed with improved input validation.
Cisco
Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2018-0485 Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability
CVE-2018-0485: Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability
A vulnerability in the SM-1T3/E3 firmware on Cisco Second Generation Integrated Services Routers (ISR G2) and the Cisco 4451-X Integrated Services Router (ISR4451-X) could allow an unauthenticated, remote attacker to cause the ISR G2 Router or the SM-1T3/E3 module on the ISR4451-X to reload, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of user input. An attacker could exploit this vulnerability by first connecting to the SM-1T3/E3 module console and entering a string sequence. A successful exploit could allow the attacker to cause the ISR G2 Router or the SM-1T3/E3 module on the ISR4451-X to reload, resulting in a DoS
GHSA
GHSA-p76j-8v8h-xfgw: This issue is fixed in macOS Mojave 10
ghsa_unreviewed·2022-05-24
CVE-2018-4451 [HIGH] GHSA-p76j-8v8h-xfgw: This issue is fixed in macOS Mojave 10
This issue is fixed in macOS Mojave 10.14. A memory corruption issue was addressed with improved input validation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-10-27
Published