CVE-2018-4164 : An issue was discovered in certain Apple products. Xcode before 9.3 is affected.

An issue was discovered in certain Apple products. Xcode before 9.3 is affected. The issue, which is unspecified, involves the "LLVM" component.

Published 2018-04-03 06:29:08

Updated 2018-05-04 14:41:24

Source Apple Inc.

View at NVD, CVE.org

Products affected by CVE-2018-4164

Apple » Xcode
Versions before (<) 9.3
cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

1.34%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 86 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

http://www.securityfocus.com/bid/103583

Apple Xcode CVE-2018-4164 Multiple Security Vulnerabilities
Third Party Advisory;VDB Entry
https://developer.apple.com/library/content/releasenotes/DeveloperTools/RN-Xcode/Chapters/Introduction.html

Xcode Release Notes
Release Notes;Vendor Advisory
http://releases.llvm.org/

Download LLVM releases
Third Party Advisory
http://lists.llvm.org/pipermail/llvm-commits/

The llvm-commits Archives
Third Party Advisory
http://www.securitytracker.com/id/1040610

Apple Xcode LLVM Flaws Have Unspecified Impact - SecurityTracker
Third Party Advisory;VDB Entry
https://support.apple.com/HT208699

About the security content of Xcode 9.3 - Apple Support
Vendor Advisory

Jump to