
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2024-44183 is a logic error vulnerability discovered in Apple's mDNSResponder component that affects multiple Apple operating systems including macOS Ventura 13.7, iOS 17.7, iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18, iPadOS 18, macOS Sonoma 14.7, and tvOS 18. The vulnerability was disclosed on September 16, 2024, and was discovered by security researcher Olivier Levon (Apple Support).
The vulnerability stems from a logic error in the mDNSResponder component that was addressed with improved error handling. The issue has been assigned a CVSS v3.1 base score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating local access is required and the primary impact is on availability (NVD).
When exploited, this vulnerability could allow a malicious application to cause a denial-of-service condition in the affected systems. The impact is limited to availability, with no direct impact on confidentiality or integrity (Apple Support).
Apple has addressed this vulnerability by implementing improved error handling in the affected systems. Users are advised to update to the following versions: macOS Ventura 13.7, iOS 17.7, iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18, iPadOS 18, macOS Sonoma 14.7, or tvOS 18 (Apple Support).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."