CVE-2015-1103

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes routing changes in response to ICMP_REDIRECT messages, which allows remote attackers to cause a denial of service (network outage) or obtain sensitive packet-content information via a crafted ICMP packet.

• CWE-20

• http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.htmlVendor Advisory
• http://www.securitytracker.com/id/1032048
• https://support.apple.com/HT204659Vendor Advisory
• https://support.apple.com/HT204661Vendor Advisory
• https://support.apple.com/HT204662Vendor Advisory
• https://support.apple.com/kb/HT204870
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.htmlVendor Advisory
• http://www.securitytracker.com/id/1032048
• https://support.apple.com/HT204659Vendor Advisory
• https://support.apple.com/HT204661Vendor Advisory
• https://support.apple.com/HT204662Vendor Advisory
• https://support.apple.com/kb/HT204870

Published

Apr 10, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1097IOMobileFramebuffer in Apple iOS before 8.3 and Apple TV bef…
• CVE-2015-1098iWork in Apple iOS before 8.3 and Apple OS X before 10.10.3 …7.3
• CVE-2015-1099Race condition in the setreuid system-call implementation in…
• CVE-2015-1100The kernel in Apple iOS before 8.3, Apple OS X before 10.10.…
• CVE-2015-1101The kernel in Apple iOS before 8.3, Apple OS X before 10.10.…
• CVE-2015-1102The kernel in Apple iOS before 8.3, Apple OS X before 10.10.…
• CVE-2015-1104The kernel in Apple iOS before 8.3, Apple OS X before 10.10.…
• CVE-2015-1105The TCP implementation in the kernel in Apple iOS before 8.3…
• CVE-2015-1106The QuickType feature in the Keyboards subsystem in Apple iO…
• CVE-2015-1107The Lock Screen component in Apple iOS before 8.3 does not p…
• CVE-2015-1108The Lock Screen component in Apple iOS before 8.3 does not p…
• CVE-2015-1109NetworkExtension in Apple iOS before 8.3 stores credentials …