製品・ソフトウェアに関する情報

JVN脆弱性詳細

複数の Apple 製品の Wi-Fi におけるサービス運用妨害 (DoS) の脆弱性

Title	複数の Apple 製品の Wi-Fi におけるサービス運用妨害 (DoS) の脆弱性
Summary	複数の Apple 製品の Wi-Fi には、Wi-Fi フレームの bounds checking を適切に処理しない不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。
Possible impacts	第三者により、サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 11, 2011, midnight
Registration Date	April 6, 2011, 6:36 p.m.
Last Update	April 6, 2011, 6:36 p.m.

Affected System

アップル

Apple TV 4.0

Apple TV 4.1

iOS 3.0 から 4.2.1 (iPhone 3GS 以降の場合)

iOS 3.1 から 4.2.1 (iPod touch (3rd generation) 以降の場合)

iOS 3.2 から 4.2.1 (iPad 用)

iPad

iPhone

iPod touch

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-0162	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0162
National Vulnerability Database (NVD)
2	CVE-2011-0162	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0162

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-20	https://jvndb.jvn.jp/ja/cwe/CWE-20.html

ベンダー情報

No	Name	URL
Apple Security Updates
1	HT4564	http://support.apple.com/kb/HT4564
2	HT4565	http://support.apple.com/kb/HT4565
Apple セキュリティアップデート
3	HT4564	http://support.apple.com/kb/HT4564?viewlocale=ja_JP
4	HT4565	http://support.apple.com/kb/HT4565?viewlocale=ja_JP

その他

No	Name	URL
ISS X-Force Database
1	65998	http://xforce.iss.net/xforce/xfdb/65998
JVN
2	JVNVU#574588	http://jvn.jp/cert/JVNVU574588
3	JVNVU#867452	http://jvn.jp/cert/JVNVU867452
SecurityFocus
4	46813	http://www.securityfocus.com/bid/46813
SecurityTracker
5	1025182	http://www.securitytracker.com/id?1025182

Change Log

No	Changed Details	Date of change
0	[2011年04月06日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2011-0162

Summary	Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service (device reset) via unspecified traffic on the local wireless network.
Publication Date	March 12, 2011, 7:55 a.m.
Registration Date	Jan. 28, 2021, 4:37 p.m.
Last Update	Nov. 21, 2024, 10:23 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html	Vendor Advisory
2	http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html	Vendor Advisory
3	http://support.apple.com/kb/HT4564	Vendor Advisory
4	http://support.apple.com/kb/HT4565	Vendor Advisory
5	http://www.securityfocus.com/bid/46813
6	http://www.securitytracker.com/id?1025182
7	https://exchange.xforce.ibmcloud.com/vulnerabilities/65998
8	http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html	Vendor Advisory
9	https://exchange.xforce.ibmcloud.com/vulnerabilities/65998
10	http://www.securitytracker.com/id?1025182
11	http://www.securityfocus.com/bid/46813
12	http://support.apple.com/kb/HT4565	Vendor Advisory
13	http://support.apple.com/kb/HT4564	Vendor Advisory
14	http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html