Apple chaiOS DoS Vulnerability

A vulnerability has been discovered in Apple's iOS and macOS operating systems that can cause a device to freeze or restart.

Threat ID:: CC-1968
Category:: Exploit
Threat Severity:: Low
Threat Vector:
Published:: 25 January 2018 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

This content has been archived

This article no longer conforms to NHS Digital's standards for cyber alerts, and may contain outdated or inaccurate information. Use of this information contained in this page is at your own risk

Summary

A vulnerability has been discovered in Apple's iOS and macOS operating systems that can cause a device to freeze or restart.

Affected platforms

The following platforms are known to be affected:

macOS

Apple iOS - Versions 10.0 to 11.2.5
Apple macOS - All versions

Threat details

This denial-of-service (DoS) attack uses a specially-crafted webpage containing large amounts of useless metadata. When a user attempts to open a link to this page using the Messages application, it causes the application to crash. Alongside this, the device may trigger a "respring" (rebooting the SpringBoard process and locking the user out of the device) or a full reboot of the device.

Remediation steps

Type	Step
	Apple have released updates to patch this vulnerability. Users are encouraged to apply the iOS 11.2.5 and macOS 10.13.3 updates immediately.

Last edited: 17 February 2020 12:37 pm