[GH-ISSUE #976] Is it possible to add CVE-2018-4407? #438

Closed
opened 2026-02-28 00:02:26 +03:00 by kerem · 4 comments
Owner

Originally created by @duduke on GitHub (Nov 5, 2018).
Original GitHub issue: https://github.com/SpacehuhnTech/esp8266_deauther/issues/976

This CVE crashes IOS/OSX devices by crafting a special PING packet.
https://hackaday.com/2018/11/01/apple-kernel-code-vulnerability-affects-everything/#more-331537

Thanks.

Originally created by @duduke on GitHub (Nov 5, 2018). Original GitHub issue: https://github.com/SpacehuhnTech/esp8266_deauther/issues/976 This CVE crashes IOS/OSX devices by crafting a special PING packet. https://hackaday.com/2018/11/01/apple-kernel-code-vulnerability-affects-everything/#more-331537 Thanks.
kerem 2026-02-28 00:02:26 +03:00
Author
Owner

@faelana commented on GitHub (Dec 20, 2018):

@duduke Great idea

<!-- gh-comment-id:448832017 --> @faelana commented on GitHub (Dec 20, 2018): @duduke Great idea
Author
Owner

@tobozo commented on GitHub (Dec 20, 2018):

from the article:

[Kevin] informed Apple of the issue privately, and they fixed the issue in September updates of macOS and iOS.

however, it'll take a decade to upgrade all devices vulnerable to deauth attacks

<!-- gh-comment-id:448888828 --> @tobozo commented on GitHub (Dec 20, 2018): from the article: > [Kevin] informed Apple of the issue privately, and they fixed the issue in September updates of macOS and iOS. however, it'll take a decade to upgrade all devices vulnerable to deauth attacks
Author
Owner

@faelana commented on GitHub (Dec 20, 2018):

@tobozo i agree!

<!-- gh-comment-id:448994070 --> @faelana commented on GitHub (Dec 20, 2018): @tobozo i agree!
Author
Owner

@tobozo commented on GitHub (Dec 20, 2018):

closing this as out of scope and too much ephemeral

<!-- gh-comment-id:449020880 --> @tobozo commented on GitHub (Dec 20, 2018): closing this as out of scope and too much ephemeral
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/esp8266_deauther#438
No description provided.