CVE-2015-3693

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 7.7%

from disclosure to weapon0 days

Published on NVDJul 3

1st PoCMar 9

exploitation probability

7.7%top 6% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service (memory corruption), by triggering certain patterns of access to memory locations.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/36311

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html http://lists.apple.com/archives/security-announce/2015/Jun/msg00003.html http://support.apple.com/kb/HT204934 http://support.apple.com/kb/HT204942 http://www.securityfocus.com/bid/75495 http://www.securitytracker.com/id/1032444 http://www.securitytracker.com/id/1032755