CVE-2015-7988

The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.

Published: Jun 26, 2016
Updated: Apr 13, 2023
CVE: CVE-2015-7988
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
apple / watchos	-	2.1
apple / iphone_os	9.0	9.1
apple / mac_os_x	10.9	10.9.5
apple / mac_os_x	10.10.0	10.10.5
apple / mac_os_x	10.11.0	10.11.1
apple / airport_base_station_firmware	7.6	7.6.7
apple / airport_base_station_firmware	7.7	7.7.7
apple / mdnsresponder	-	625.41.2

http://www.kb.cert.org/vuls/id/143335
http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
http://www.securitytracker.com/id/1036181
https://support.apple.com/HT206846

Vulnerability Database

CVE-2015-7988

Deep Security Visibility Without the Complexity