CVE-2015-3693

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service (memory corruption), by triggering certain patterns of access to memory locations.

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

7.61% chance of exploitation in the next 30 days, 94th percentile

Published

2015-07-03

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/36311

Security advisories

• http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
• http://lists.apple.com/archives/security-announce/2015/Jun/msg00003.html
• http://support.apple.com/kb/HT204934
• http://support.apple.com/kb/HT204942
• http://www.securityfocus.com/bid/75495

References

• CVE Record
• NVD entry