Security Advisory

CVE-2015-3693

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-07-03 01:00:00
Last updated 2024-08-06 05:56:14
Assigner apple
CVSS score not scored
State PUBLISHED

Description

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service (memory corruption), by triggering certain patterns of access to memory locations.