CVE-2015-7015: Buffer Overflow
Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7015?
CVE-2015-7015 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2015-7015?
To mitigate CVE-2015-7015, users should update their Apple iOS, OS X, or watchOS to the latest versions beyond the affected releases.
What systems are affected by CVE-2015-7015?
CVE-2015-7015 affects Apple iOS versions before 9.1, OS X versions before 10.11.1, and watchOS versions before 2.0.1.
Can CVE-2015-7015 be exploited remotely?
Yes, CVE-2015-7015 can be exploited remotely through a crafted app that sends a spoofed response.
What type of vulnerability is CVE-2015-7015?
CVE-2015-7015 is a heap-based buffer overflow vulnerability in the DNS client library of Apple's configd.