CVE-2015-1117

The (1) setreuid and (2) setregid system-call implementations in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 do not…

published April 10, 2015

CVSS
—
EPSS
0%
Percentile
31.8
In the wild
Unconfirmed
What it is

The (1) setreuid and (2) setregid system-call implementations in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 do not properly perform privilege drops, which makes it easier for attackers to execute code with unintended user or group privileges via a crafted app.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00389 · 31.8th percentile
Published
2015-04-10T14:00Z
EPSS history
Timeline
  • 10 APR 14:00Z
    The (1) setreuid and (2) setregid system-call implementations in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 do not…
    cvelistv5