CVE-2018-4249: Integer Overflow

Reference Links

• https://support.apple.com/en-us/HT208849 (Advisory)
• http://packetstormsecurity.com/files/172828/Apple-packet-mangler-Remote-Code-Execution.html
• http://www.securitytracker.com/id/1041027
• https://lgtm.com/blog/apple_xnu_packet_mangler_CVE-2017-13904
• https://support.apple.com/HT208848
• https://support.apple.com/HT208849
• https://support.apple.com/HT208850
• https://support.apple.com/HT208851

Parent vulnerabilities

(Appears in the following advisories)

• HT208849

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2018-4196
• CVE-2018-4253
• CVE-2018-4256
• CVE-2018-4255
• CVE-2018-4254
• CVE-2018-4258
• CVE-2018-4257
• CVE-2018-7584
• CVE-2018-4219
• CVE-2018-5383
• CVE-2018-4171
• CVE-2018-4194
• CVE-2018-4180
• CVE-2018-4181
• CVE-2018-4182
• CVE-2018-4183
• CVE-2018-4478
• CVE-2018-4251
• CVE-2018-4211
• CVE-2018-4229
• CVE-2018-4159
• CVE-2018-4242
• CVE-2018-4202
• CVE-2018-4217
• CVE-2018-4141
• CVE-2018-4228
• CVE-2018-4236
• CVE-2018-4234
• CVE-2018-4249
• CVE-2018-8897
• CVE-2018-4241
• CVE-2018-4243
• CVE-2018-4237
• CVE-2018-4404
• CVE-2018-4227
• CVE-2018-4235
• CVE-2018-4240
• CVE-2018-4230
• CVE-2018-4221
• CVE-2018-4223
• CVE-2018-4224
• CVE-2018-4225
• CVE-2018-4226
• CVE-2018-4184
• CVE-2018-4198
• CVE-2018-4193

Frequently Asked Questions

• What is CVE-2018-4249?

  CVE-2018-4249 is a memory corruption issue in the Kernel component of certain Apple products.

• Which products are affected by CVE-2018-4249?

  iOS before 11.4, macOS before 10.13.5, tvOS before 11.4, and watchOS before 4.3.1 are affected.

• What is the severity of CVE-2018-4249?

  CVE-2018-4249 has a severity rating of 7.8 (Critical).

• How can I fix CVE-2018-4249?

  Update to the latest version of iOS, macOS, tvOS, or watchOS, depending on the affected product.

• Where can I find more information about CVE-2018-4249?

  You can find more information about CVE-2018-4249 at the following references: [Reference 1](http://packetstormsecurity.com/files/172828/Apple-packet-mangler-Remote-Code-Execution.html), [Reference 2](http://www.securitytracker.com/id/1041027), [Reference 3](https://lgtm.com/blog/apple_xnu_packet_mangler_CVE-2017-13904).