Apple iOS SSL Certification Processing Deny of Service Vulnerability

Last Update Date: 24 Apr 2015 10:11 Release Date: 24 Apr 2015 3738 Views

RISK: High Risk

TYPE: Operating Systems - Mobile & Apps

A vulnerability was identified in Apple iOS. A remote user can cause denial of service conditions on the target system in certain cases.

A remote user with control of a wireless network that the target device is connected to can create a specially crafted SSL certificate that, when processed by an app that uses SSL, will cause the target app to crash.

This vulnerability is also know as "No iOS Zone".

Impact

Denial of Service

System / Technologies affected

Apple iOS 8

Solutions

No official solution is currently available.

Vulnerability Identifier

No CVE information is available

Source

SecurityTracker