Apple Airport Base Station vulnerabilities
11 vulnerabilities
Known vulnerabilities in Apple Airport Base Station, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2013-5132appleairport_base_station_firmware
EPSS score1.07%
Apple AirPort Base Station Firmware before 7.6.4 does not properly handle incorrect frame lengths, which allows remote attackers to cause a denial of service (device crash) by associating with the access point and then sending a short frame.CVE-2015-7029appleairport_base_station_firmwareEPSS score3.93%
Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x before 7.7.7 misparses DNS data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.CVE-2015-7987appleairport_base_station_firmware+4EPSS score2.51%
Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3ResourceRecord function.CVE-2015-7988appleairport_base_station_firmware+4EPSS score4.82%
The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.CVE-2019-7291appleairport_base_station_firmware+1EPSS score1.12%
A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. An attacker in a privileged position may be able to perform a denial of service attack.CVE-2019-8588appleairport_base_station_firmware+1EPSS score1.84%
A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause a system denial of service.CVE-2019-8572appleairport_base_station_firmware+1EPSS score2.74%
A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.CVE-2019-8575appleairport_base_station_firmware+1EPSS score1.23%
The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A base station factory reset may not delete all user information.CVE-2019-8581appleairport_base_station_firmware+1EPSS score1.81%
An out-of-bounds read was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to leak memory.CVE-2019-8580appleairport_base_station_firmware+1EPSS score1.05%
Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. Source-routed IPv4 packets may be unexpectedly accepted.CVE-2019-8578appleairport_base_station_firmware+1EPSS score2.72%
A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.