CVE-2026-111923
high
CVSS 7.5
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment...
概要
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers can send a crafted binary plist payload of about 150 bytes to the enrollment endpoints, triggering exponential allocation or infinite recursion that exhausts CPU and memory.
出典: NIST National Vulnerability Database NVD GitHub Advisory
参照URL
- web github.com
- web vulncheck.com
- web nvd.nist.gov
- web github.com