CVE-2018-4407
HIGHiPhone OS < 12.0 - Memory Corruption via ICMP Error Handling
Title source: llmExploitation Summary
EIP tracks 18 public exploits for CVE-2018-4407. PoCs published by Pa55w0rd, unixpickle, r3dxpl0it.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2018-4407, a remote kernel heap overflow vulnerability in iOS and macOS. The exploit sends maliciously crafted IP packets with specific options to trigger a denial-of-service (DoS) condition on vulnerable devices.
Description
A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
Exploits (18)
This repository contains a proof-of-concept exploit for CVE-2018-4407, a remote kernel heap overflow vulnerability in iOS and macOS. The exploit sends maliciously crafted IP packets with specific options to trigger a denial-of-service (DoS) condition on vulnerable devices.
This PoC exploits CVE-2018-4407, a DoS vulnerability in macOS and iOS devices by sending maliciously crafted ICMP packets with invalid IP options. The exploit triggers a kernel panic due to improper handling of IP options in the XNU kernel.
This repository contains a Python-based exploit for CVE-2018-4407, a heap buffer overflow vulnerability in the XNU kernel affecting iOS and macOS. The exploit sends malformed TCP packets to trigger a denial-of-service (DoS) condition on vulnerable systems.
This PoC exploits CVE-2018-4407, a heap overflow vulnerability in Apple's XNU kernel caused by malformed ICMP error messages. It sends crafted TCP packets with oversized options to trigger a denial-of-service (DoS) on vulnerable Apple devices.
This PoC exploits a heap buffer overflow in the XNU kernel's ICMP packet handling (CVE-2018-4407) to trigger a kernel crash and reboot on iOS/macOS devices. It scans the local network and sends malformed ICMP packets to vulnerable hosts.
This PoC exploits CVE-2018-4407, a kernel crash vulnerability in iOS/macOS, by sending malformed IP packets with crafted IPOption and TCP options to trigger a denial-of-service (DoS) condition. The script includes ping scanning and multi-threading for targeting multiple hosts.
This PoC exploits CVE-2018-4407, a remote kernel heap overflow in Apple's XNU kernel, by sending malformed IP packets with crafted TCP options. It targets iOS and macOS devices, causing a denial-of-service (DoS) condition.
This PoC exploits a heap buffer overflow in the XNU kernel (CVE-2018-4407) by sending malformed IP packets with oversized options to trigger a kernel crash and device reboot. It targets iOS and macOS devices via network packets to ports 62078 and 2323.
This repository contains a Python-based tool that exploits CVE-2018-4407, a heap buffer overflow vulnerability in Apple devices. It sends a malicious ICMP packet to crash macOS High Sierra or iOS 11 devices on the same WiFi network.
This exploit targets CVE-2018-4407, a heap buffer overflow in the XNU kernel's networking code, affecting iOS and macOS. It crafts malicious TCP packets with oversized options to trigger a denial-of-service (DoS) condition.
The repository contains a functional exploit script for CVE-2018-4407, which targets a buffer overflow vulnerability in the Apple macOS kernel. The script uses Scapy to send crafted IP packets with malformed options to trigger the vulnerability.
This PoC exploits CVE-2018-4407, a buffer overflow in the XNU kernel's ICMP error handling, causing a DoS on iOS/macOS devices via malformed IP/TCP packets. The script uses Scapy to craft packets with specific header lengths and options to trigger the vulnerability.
This PoC exploits CVE-2018-4407, a DoS vulnerability in Apple's XNU kernel by sending malformed ICMP packets with oversized options, causing a crash in macOS and iOS devices. The script uses Scapy to craft and send these packets.
This repository contains a functional PoC for CVE-2018-4407, a remote kernel heap overflow in iOS/macOS. The exploit sends malformed ICMP packets with crafted IP and TCP options to trigger a DoS condition.
This PoC exploits CVE-2018-4407, a denial-of-service vulnerability in Apple's macOS and iOS, by sending a malformed IP packet with crafted options to trigger a kernel panic. The exploit uses Scapy to construct and send the packet to the target.
The repository contains a functional exploit script for CVE-2018-4407, which targets a denial-of-service (DoS) vulnerability in Apple's macOS and iOS. The script uses Scapy to send malformed IP packets with crafted options to trigger the vulnerability.
This PoC exploits CVE-2018-4407, a kernel crash vulnerability in Apple's ICMP packet-handling code, by sending malformed ICMP packets with crafted IP and TCP options to trigger an out-of-bounds write, resulting in a DoS condition.
This PoC exploits CVE-2018-4407, an ICMP-based DoS vulnerability in Apple's XNU kernel. It sends malformed ICMP packets with oversized IP options to trigger a denial-of-service condition on vulnerable systems.
References (6)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H