CVE-2019-8588 Null dereference in AirPort Base Station Firmware Update

What is CVE-2019-8588?

CVE-2019-8588 is a high-severity vulnerability in Apple AirPort Base Station Firmware Update, published on 27 Oct 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause a system denial of service.

Weakness: CWE-476

Which versions are affected by CVE-2019-8588?

It affects 1 product.

Products include Apple Airport Base Station Firmware.

How do I fix CVE-2019-8588?

No fix has been published for CVE-2019-8588 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-8588 being exploited?

There is no known exploitation of CVE-2019-8588 in the wild and no public exploit code.

Other vulnerabilities in Apple AirPort Base Station Firmware Update

• CVE-2019-8572 Null dereference in AirPort Base Station Firmware Update Critical 9.8
• CVE-2019-8578 Use after free in AirPort Base Station Firmware Update Critical 9.8
• CVE-2019-8581 Information disclosure in AirPort Base Station Firmware Update Critical 9.8
• CVE-2015-7029 Memory corruption in n/a Critical 9.8
• CVE-2015-7987 Memory corruption in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4p49-59gq-x3fh.