CVE-2015-5879

XNU in the kernel in Apple iOS before 9 does not properly validate the headers of TCP packets, which allows remote attackers to bypass the sequence-number protection mechanism and cause a denial of service (TCP connection disruption) via a crafted header.

• CWE-20

• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlVendor Advisory
• http://www.securityfocus.com/bid/76764
• http://www.securitytracker.com/id/1033609
• https://support.apple.com/HT205212Vendor Advisory
• https://support.apple.com/HT205267Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlVendor Advisory
• http://www.securityfocus.com/bid/76764
• http://www.securitytracker.com/id/1033609
• https://support.apple.com/HT205212Vendor Advisory
• https://support.apple.com/HT205267Vendor Advisory

Published

Sep 18, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5873IOGraphics in Apple OS X before 10.11 allows local users to …
• CVE-2015-5874CoreText in Apple iOS before 9 and iTunes before 12.3 allows…
• CVE-2015-5875Cross-site scripting (XSS) vulnerability in Notes in Apple O…
• CVE-2015-5876dyld in Dev Tools in Apple iOS before 9 allows attackers to …
• CVE-2015-5877The Intel Graphics Driver component in Apple OS X before 10.…
• CVE-2015-5878Notes in Apple OS X before 10.11 misparses links, which allo…
• CVE-2015-5880CoreAnimation in Apple iOS before 9 allows attackers to bypa…
• CVE-2015-5881Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-5882The processor_set_tasks API implementation in Apple iOS befo…
• CVE-2015-5883The bidirectional text-display and text-selection implementa…
• CVE-2015-5884The Mail Drop feature in Mail in Apple OS X before 10.11 mis…
• CVE-2015-5885The CFNetwork Cookies component in Apple iOS before 9 allows…