CVE-2018-4409

MEDIUM

Safari < 12.0.1 - Denial of Service via Resource Exhaustion

Title source: llm
STIX 2.1

Description

A resource exhaustion issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, tvOS 12.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

References (5)

Core 5
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209192
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209194
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209197
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209198
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209196

Scores

CVSS v3 6.5
EPSS 0.0164
EPSS Percentile 73.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-400
Status published
Products (5)
apple/icloud < 7.8
apple/iphone_os < 12.1
apple/itunes < 12.9.1
apple/safari < 12.0.1
apple/tvos < 12.1
Published Apr 03, 2019
Tracked Since Feb 18, 2026