CVE-2014-1361

Secure Transport in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 does not ensure that a DTLS message is accepted only for a DTLS connection, which allows remote attackers to obtain potentially sensitive information from uninitialized process memory by providing a DTLS message within a TLS connection.

Score
CVSS 2.0 5.0 Medium
Status
Modified - product-security@apple.com
Published
2014-07-01
Last modified
2024-08-06
Weaknesses
CWE-200

Affected products

References

 
 
© AVABIS GmbH privacypolicy about