CVE-2018-4192: Race Condition

Reference Links

• https://support.apple.com/en-us/HT208852 (Advisory)
• http://www.securitytracker.com/id/1041029
• https://security.gentoo.org/glsa/201808-04
• https://support.apple.com/HT208848
• https://support.apple.com/HT208850
• https://support.apple.com/HT208851
• https://support.apple.com/HT208852
• https://support.apple.com/HT208853
• https://support.apple.com/HT208854
• https://www.exploit-db.com/exploits/45048/

Parent vulnerabilities

(Appears in the following advisories)

• HT208852

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2018-4194
• CVE-2018-4224
• CVE-2018-4225
• CVE-2018-4226
• CVE-2018-4232
• CVE-2018-4192
• CVE-2018-4214
• CVE-2018-4204
• CVE-2018-4246
• CVE-2018-4200
• CVE-2018-4188
• CVE-2018-4201
• CVE-2018-4218
• CVE-2018-4233
• CVE-2018-4199
• CVE-2018-4190
• CVE-2018-4222
• CVE-2018-4145

Frequently Asked Questions

• What is CVE-2018-4192?

  CVE-2018-4192 is a vulnerability in certain Apple products that allows a race condition and has been addressed with improved locking.

• Which Apple products are affected by CVE-2018-4192?

  iOS before 11.4, Safari before 11.1.1, iCloud before 7.5 on Windows, iTunes before 12.7.5 on Windows, tvOS before 11.4, and watchOS before 4.3.1 are affected by CVE-2018-4192.

• What is the severity of CVE-2018-4192?

  CVE-2018-4192 has a severity level of high with a CVSS score of 7.5.

• How can I fix CVE-2018-4192?

  To fix CVE-2018-4192, make sure to update to the recommended versions of the affected Apple products: iOS 11.4, Safari 11.1.1, iCloud 7.5 on Windows, iTunes 12.7.5 on Windows, tvOS 11.4, and watchOS 4.3.1.

• Where can I find more information about CVE-2018-4192?

  You can find more information about CVE-2018-4192 on the Apple support page at https://support.apple.com/en-us/HT208852, SecurityTracker at http://www.securitytracker.com/id/1041029, and Gentoo Security at https://security.gentoo.org/glsa/201808-04.