What’s Vulnerable › Vulnerabilities

CVE-2015-7987

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-06-26 · updated 2026-06-17
• Weakness: CWE-119

Description

Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3ResourceRecord function.

Affected products

• Apple AirPort Base Station Firmware Update: from 7.6 before 7.6.7; from 7.7 before 7.7.7 — fixed in 7.6.7, 7.7.7
• Apple Iphone Os: from 9.0 before 9.1 — fixed in 9.1
• macOS: from 10.9 before 10.9.5; from 10.10.0 before 10.10.5; from 10.11.0 before 10.11.1 — fixed in 10.10.5, 10.11.1, 10.9.5
• Apple Mdnsresponder: before 625.41.2 — fixed in 625.41.2
• Apple watchOS: before 2.1 — fixed in 2.1

How to fix

Upgrade to a fixed version: Apple AirPort Base Station Firmware Update 7.6.7, 7.7.7; Apple Iphone Os 9.1; macOS 10.10.5, 10.11.1, 10.9.5; Apple Mdnsresponder 625.41.2; Apple watchOS 2.1. Check the vendor advisory for mitigations.

References

• http://www.kb.cert.org/vuls/id/143335
• http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
• http://www.securityfocus.com/bid/91323
• http://www.securitytracker.com/id/1036181
• https://support.apple.com/HT206846
• http://www.kb.cert.org/vuls/id/143335
• http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
• http://www.securityfocus.com/bid/91323
• http://www.securitytracker.com/id/1036181
• https://support.apple.com/HT206846

Get alerted when CVE-2015-7987 or the next vulnerability affects your stack