Kernel RCE caused by buffer overflow in Apple's ICMP packet-handling code (CVE-2018-4407)

原文出處：https://lgtm.com/blog/apple_xnu_icmp_error_CVE-2018-4407

The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones, iPads, and Macbooks are all affected. To trigger the vulnerability, an attacker merely needs to send a malicious IP packet to the IP address of the target device. No user interaction is required. The attacker only needs to be connected to the same network as the target device.

文章圖片來源：https://lgtm.com/blog/apple_xnu_icmp_error_CVE-2018-4407
前言引用來源：https://lgtm.com/blog/apple_xnu_icmp_error_CVE-2018-4407

－－－－－－－－－－－－－－－－－－－
如果你認同我們每日分享的文章，請幫我們按個讚並且點擊追蹤「搶先看」，讓我們提供最新消息給您！您的分享及點讚，是我們持續推廣資訊安全最大的動力來源。
https://www.facebook.com/LonelyPoPo/