CVE-2019-8580

published 2020-10-27

CVE-2019-8580: Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I H A N

Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. Source-routed IPv4 packets may be unexpectedly accepted.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
apple	airport_base_station_firmware	< 7.8.1	7.8.1
apple	airport_base_station_firmware_update	—	—
apple	airport_base_station_firmware_update	>= unspecified < 7.9	7.9
apple	airport_base_station_firmware_update	>= unspecified < 7.8	7.8