Apple AirPort Base Station Firmware before 7.6.4 does not properly handle incorrect frame lengths, which allows remote attackers to cause a denial of service (device crash) by associating with the access point and then sending a short frame.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Airport_base_station_firmware | Apple | * | 7.6.3 (including) |
| Airport_base_station_firmware | Apple | 7.3.2 (including) | 7.3.2 (including) |
| Airport_base_station_firmware | Apple | 7.4.1 (including) | 7.4.1 (including) |
| Airport_base_station_firmware | Apple | 7.4.2 (including) | 7.4.2 (including) |
| Airport_base_station_firmware | Apple | 7.5.2 (including) | 7.5.2 (including) |
| Airport_base_station_firmware | Apple | 7.6 (including) | 7.6 (including) |
| Airport_base_station_firmware | Apple | 7.6.1 (including) | 7.6.1 (including) |
| Airport_base_station_firmware | Apple | 7.6.2 (including) | 7.6.2 (including) |