CVE-2008-4219
First published: Wed Dec 17 2008(Updated: )
The kernel in Apple Mac OS X before 10.5.6 allows local users to cause a denial of service (infinite loop and system halt) by running an application that is dynamically linked to libraries on an NFS server, related to occurrence of an exception in this application.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS Server | =10.5.2 | |
| Apple macOS Server | <=10.5.5 | |
| Apple iOS and macOS | =10.5.1 | |
| Apple macOS Server | =10.5.1 | |
| Apple iOS and macOS | =10.5.3 | |
| Apple macOS Server | =10.5.3 | |
| Apple iOS and macOS | =10.5 | |
| Apple macOS Server | =10.5.4 | |
| Apple iOS and macOS | =10.5.2 | |
| Apple iOS and macOS | <=10.5.5 | |
| Apple macOS Server | =10.5 | |
| Apple iOS and macOS | =10.5.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.us-cert.gov/cas/techalerts/TA08-350A.html
- http://www.securityfocus.com/bid/32839
- http://support.apple.com/kb/HT3338
- http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
- http://secunia.com/advisories/33179
- http://www.securityfocus.com/bid/32873
- http://www.securitytracker.com/id?1021404
- http://www.vupen.com/english/advisories/2008/3444
Frequently Asked Questions
What is the severity of CVE-2008-4219?
CVE-2008-4219 is classified as a medium severity vulnerability that can lead to a local denial of service.
How do I fix CVE-2008-4219?
To mitigate CVE-2008-4219, update your Apple Mac OS X to version 10.5.6 or later.
Who is affected by CVE-2008-4219?
CVE-2008-4219 affects local users running applications on Apple Mac OS X versions prior to 10.5.6.
What type of attack does CVE-2008-4219 lead to?
CVE-2008-4219 allows for a denial of service attack that can cause the system to halt due to an infinite loop.
Is CVE-2008-4219 an exploitable vulnerability?
Yes, CVE-2008-4219 can be exploited by local users with access to applications linked to NFS server libraries.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/apple
- canonical/apple macos server
- version/apple macos server/10.5.2
- version/apple macos server/10.5.5
- canonical/apple ios and macos
- version/apple ios and macos/10.5.1
- version/apple macos server/10.5.1
- version/apple ios and macos/10.5.3
- version/apple macos server/10.5.3
- version/apple ios and macos/10.5
- version/apple macos server/10.5.4
- version/apple ios and macos/10.5.2
- version/apple ios and macos/10.5.5
- version/apple macos server/10.5
- version/apple ios and macos/10.5.4