Vulnerability Description
A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score
5.0
MEDIUM
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Iphone Os | < 12.0 |
| Apple | Mac Os X | < 10.14 |
| Apple | Tvos | < 12 |
| Apple | Watchos | < 5.0 |
Related Weaknesses (CWE)
References
- https://support.apple.com/kb/HT209106Vendor Advisory
- https://support.apple.com/kb/HT209107Vendor Advisory
- https://support.apple.com/kb/HT209108Vendor Advisory
- https://support.apple.com/kb/HT209139Vendor Advisory
- https://support.apple.com/kb/HT209193Vendor Advisory
- https://support.apple.com/kb/HT209106Vendor Advisory
- https://support.apple.com/kb/HT209107Vendor Advisory
- https://support.apple.com/kb/HT209108Vendor Advisory
- https://support.apple.com/kb/HT209139Vendor Advisory
- https://support.apple.com/kb/HT209193Vendor Advisory
FAQ
What is CVE-2018-4304?
CVE-2018-4304 is a vulnerability with a CVSS score of 5.0 (MEDIUM). A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
How severe is CVE-2018-4304?
CVE-2018-4304 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-4304?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Iphone Os, Apple Mac Os X, Apple Tvos, Apple Watchos.