ByteOS Network

Vulnerability Details :

CVE-2013-5138

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-19 Sep, 2013 | 10:00

Updated At-06 Aug, 2024 | 17:06

IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted application.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:19 Sep, 2013 | 10:00

Updated At:06 Aug, 2024 | 17:06

▼CVE Numbering Authority (CNA)

IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted application.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securitytracker.com/id/1029054	vdb-entry x_refsource_SECTRACK
http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html	vendor-advisory x_refsource_APPLE
http://support.apple.com/kb/HT5934	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html	vendor-advisory x_refsource_APPLE

Hyperlink: http://www.securitytracker.com/id/1029054

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://support.apple.com/kb/HT5934

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

Resource:

vendor-advisory

x_refsource_APPLE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securitytracker.com/id/1029054	vdb-entry x_refsource_SECTRACK x_transferred
http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html	vendor-advisory x_refsource_APPLE x_transferred
http://support.apple.com/kb/HT5934	x_refsource_CONFIRM x_transferred
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html	vendor-advisory x_refsource_APPLE x_transferred

Hyperlink: http://www.securitytracker.com/id/1029054

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://support.apple.com/kb/HT5934

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:19 Sep, 2013 | 10:28

Updated At:11 Apr, 2025 | 00:51

IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted application.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.7	MEDIUM	AV:L/AC:M/Au:N/C:N/I:N/A:C

Type: Primary

Version: 2.0

Base score: 4.7

Base severity: MEDIUM

Vector:

AV:L/AC:M/Au:N/C:N/I:N/A:C

CPE Matches

Apple Inc.

>>iphone_os>>Versions up to 6.1.4(inclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>1.0.0

cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>1.0.1

cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>1.0.2

cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>1.1.0

cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>1.1.1

cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>1.1.2

cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>1.1.3

cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>1.1.4

cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>1.1.5

cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>2.0

cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>2.0.0

cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>2.0.1

cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>2.0.2

cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>2.1

cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>2.1.1

cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>2.2

cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>2.2.1

cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>3.0

cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>3.0.1

cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>3.1

cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>3.1.2

cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>3.1.3

cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>3.2

cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>3.2.1

cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>3.2.2

cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.0

cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.0.1

cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.0.2

cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.1

cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.2.1

cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.2.5

cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.2.8

cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.3.0

cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.3.1

cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.3.2

cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.3.3

cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>4.3.5

cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>5.0

cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>5.0.1

cpe:2.3:o:apple:iphone_os:5.0.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>5.1

cpe:2.3:o:apple:iphone_os:5.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>5.1.1

cpe:2.3:o:apple:iphone_os:5.1.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>6.0

cpe:2.3:o:apple:iphone_os:6.0:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>6.0.1

cpe:2.3:o:apple:iphone_os:6.0.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>6.0.2

cpe:2.3:o:apple:iphone_os:6.0.2:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>6.1

cpe:2.3:o:apple:iphone_os:6.1:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>6.1.2

cpe:2.3:o:apple:iphone_os:6.1.2:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>6.1.3

cpe:2.3:o:apple:iphone_os:6.1.3:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html	product-security@apple.com	Vendor Advisory
http://support.apple.com/kb/HT5934	product-security@apple.com	Vendor Advisory
http://www.securitytracker.com/id/1029054	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://support.apple.com/kb/HT5934	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securitytracker.com/id/1029054	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT5934

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: http://www.securitytracker.com/id/1029054

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT5934

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.securitytracker.com/id/1029054

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

4Records found

CVE-2014-4442

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-4.7||MEDIUM

EPSS-0.04% / 13.05%

7 Day CHG~0.00%

Published-18 Oct, 2014 | 01:00

Updated-12 Apr, 2025 | 10:46

The kernel in Apple OS X before 10.10 allows local users to cause a denial of service (panic) via a message to a system control socket.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2014-1253

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-4.7||MEDIUM

EPSS-0.06% / 17.32%

7 Day CHG~0.00%

Published-13 Feb, 2014 | 22:00

Updated-11 Apr, 2025 | 00:51

AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have unspecified other impact via a malformed header in a Portable Executable (PE) file.

Vendor-n/a Apple Inc.

Product-boot_camp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-6799

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4.7||MEDIUM

EPSS-0.94% / 75.23%

7 Day CHG~0.00%

Published-16 Nov, 2013 | 11:00

Updated-11 Apr, 2025 | 00:51

Apple Mac OS X 10.9 allows local users to cause a denial of service (memory corruption or panic) by creating a hard link to a directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0105.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2007-3739

Matching Score-8

Assigner-Red Hat, Inc.

View Details

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-4.7||MEDIUM

EPSS-0.09% / 26.60%

7 Day CHG~0.00%

Published-14 Sep, 2007 | 01:00

Updated-07 Aug, 2024 | 14:28

mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service (OOPS) via unspecified vectors.

Vendor-n/a Red Hat, Inc.Apple Inc.

Product-powerpc enterprise_linux n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-399

Not Available

CVE-2013-5138

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs