CVE-2015-3693

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service (memory corruption), by triggering certain patterns of access to memory locations.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

7.66% chance of exploitation in the next 30 days, 94th percentile

Published

2015-07-03

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/36311

References

• CVE Record
• NVD entry

Related

• CVE-2015-3673
• CVE-2015-3704
• CVE-2015-3648
• CVE-2015-3710
• CVE-2015-3643
• CVE-2015-3760