CVE-2020-3862

MEDIUM

iCloud < 7.17 - Denial of Service via Malicious Website

Title source: llm

Description

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service.

References (4)

Core 4

Core References

Release Notes, Vendor Advisory x_refsource_misc

https://support.apple.com/HT210947

Release Notes, Vendor Advisory x_refsource_misc

https://support.apple.com/HT210948

Mailing List, Patch, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/202003-22

Scores

CVSS v3 6.5

EPSS 0.0022

EPSS Percentile 44.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

Status published

Products (7)

apple/icloud < 7.17

apple/ipados < 13.3.1

apple/iphone_os < 13.3.1

apple/itunes < 12.10.4

apple/safari < 13.0.5

apple/tvos < 13.3.1

opensuse/leap 15.1

Published Feb 27, 2020

Tracked Since Feb 18, 2026