CVE-2015-5869: Input Validation
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement (RA) message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5869?
CVE-2015-5869 is classified as a medium severity vulnerability due to its potential to allow remote attackers to modify hop-limit settings.
How do I fix CVE-2015-5869?
To mitigate CVE-2015-5869, users should update their affected Apple iOS, macOS, or watchOS versions to the latest available releases.
Which devices are affected by CVE-2015-5869?
CVE-2015-5869 affects Apple iPhone OS versions up to 8.4.1, macOS Yosemite up to 10.10.5, and watchOS version 1.0.
What kind of attack can be executed using CVE-2015-5869?
CVE-2015-5869 can be exploited by attackers to send malicious Router Advertisement messages that change the hop-limit value.
When was CVE-2015-5869 disclosed?
CVE-2015-5869 was disclosed in September 2015 following security announcements from Apple.