CVE-2015-5869

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.

• CWE-20

• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlVendor Advisory
• http://openwall.com/lists/oss-security/2015/04/04/2
• http://www.securityfocus.com/bid/76764
• http://www.securitytracker.com/id/1033609
• https://support.apple.com/HT205212Vendor Advisory
• https://support.apple.com/HT205213Vendor Advisory
• https://support.apple.com/HT205267Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlVendor Advisory
• http://openwall.com/lists/oss-security/2015/04/04/2
• http://www.securityfocus.com/bid/76764
• http://www.securitytracker.com/id/1033609
• https://support.apple.com/HT205212Vendor Advisory
• https://support.apple.com/HT205213Vendor Advisory
• https://support.apple.com/HT205267Vendor Advisory

Published

Sep 18, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5863IOStorageFamily in Apple iOS before 9 does not properly init…
• CVE-2015-5864IOAudioFamily in Apple OS X before 10.11 allows local users …
• CVE-2015-5865IOGraphics in Apple OS X before 10.11 allows attackers to ob…
• CVE-2015-5866IOHIDFamily in Apple OS X before 10.11 allows attackers to e…
• CVE-2015-5867IOHIDFamily in Apple iOS before 9 allows attackers to execut…
• CVE-2015-5868The kernel in Apple iOS before 9 allows local users to gain …
• CVE-2015-5870The debugging interfaces in the kernel in Apple OS X before …
• CVE-2015-5871IOGraphics in Apple OS X before 10.11 allows local users to …
• CVE-2015-5872IOGraphics in Apple OS X before 10.11 allows local users to …
• CVE-2015-5873IOGraphics in Apple OS X before 10.11 allows local users to …
• CVE-2015-5874CoreText in Apple iOS before 9 and iTunes before 12.3 allows…
• CVE-2015-5875Cross-site scripting (XSS) vulnerability in Notes in Apple O…