CVE-2015-9231: Infoleak

Published Sep 20, 2017

Updated

iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new (default) feature was added to iTerm2 version 3.0.0 (and unreleased 2.9.x versions such as 2.9.20150717) that resulted in a potential information disclosure. In an attempt to see whether the text under the cursor (or selected text) was a URL, the text would be sent as an unencrypted DNS query. This has the potential to result in passwords and other sensitive information being sent in cleartext without the user being aware.

Affected Software

40 affected components

iTerm2 iTerm2=2.9.20151111

iTerm2 iTerm2=2.9.20151229

iTerm2 iTerm2=2.9.20160102

iTerm2 iTerm2=2.9.20160113

iTerm2 iTerm2=2.9.20160206

iTerm2 iTerm2=2.9.20160313

iTerm2 iTerm2=2.9.20160422

iTerm2 iTerm2=2.9.20160426

iTerm2 iTerm2=2.9.20160510

iTerm2 iTerm2=2.9.20160523

iTerm2 iTerm2=3.0.0

iTerm2 iTerm2=3.0.0-preview

iTerm2 iTerm2=3.0.1-preview

iTerm2 iTerm2=3.0.2

iTerm2 iTerm2=3.0.3

iTerm2 iTerm2=3.0.4

iTerm2 iTerm2=3.0.5

iTerm2 iTerm2=3.0.6

iTerm2 iTerm2=3.0.7

iTerm2 iTerm2=3.0.8

iTerm2 iTerm2=3.0.9

iTerm2 iTerm2=3.0.10

iTerm2 iTerm2=3.0.11

iTerm2 iTerm2=3.0.12

iTerm2 iTerm2=3.0.13

iTerm2 iTerm2=3.0.14

iTerm2 iTerm2=3.0.15

iTerm2 iTerm2=3.0.20160531

iTerm2 iTerm2=3.1.0

iTerm2 iTerm2=3.1.0-beta

iTerm2 iTerm2=3.1.0-beta1

iTerm2 iTerm2=3.1.0-beta10

iTerm2 iTerm2=3.1.0-beta2

iTerm2 iTerm2=3.1.0-beta3

iTerm2 iTerm2=3.1.0-beta4

iTerm2 iTerm2=3.1.0-beta5

iTerm2 iTerm2=3.1.0-beta6

iTerm2 iTerm2=3.1.0-beta7

iTerm2 iTerm2=3.1.0-beta8

iTerm2 iTerm2=3.1.0-beta9

Event History

Sep 20, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-9231?

CVE-2015-9231 has been classified as a medium severity vulnerability.

How do I fix CVE-2015-9231?

To remediate CVE-2015-9231, upgrade iTerm2 to version 3.1.1 or later.

What does CVE-2015-9231 aim to exploit?

CVE-2015-9231 exploits a feature in iTerm2 that allows remote attackers to discover passwords by reading DNS queries.

Which versions of iTerm2 are affected by CVE-2015-9231?

CVE-2015-9231 affects iTerm2 versions 2.9.x and 3.0.x prior to 3.1.1.

What should I be aware of regarding CVE-2015-9231?

Users of affected iTerm2 versions should be cautious of potential password exposure due to this information disclosure vulnerability.