Apple Mdnsresponder vulnerabilities

3 CVEs affecting Apple Mdnsresponder, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7988, published 2016-06-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0613, published 2007-01-31. Medium severity, CVSS 5.0. EPSS: 7.4% chance of exploitation in the next 30 days. The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available…
CVE-2015-7988, published 2016-06-26. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified…
CVE-2015-7987, published 2016-06-26. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2)…