Mise à jour pour les produits Apple AirPort 802.11ac

Apple pro­pose une mise à jour de sécu­rité firmware numérotée 7.9.1 pour ses bornes Air­port et Time Cap­sule 802.11ac.

Tous les matériels de nos clients cou­verts par nos con­trats de sauve­g­arde / sécu­rité ont été mis à jour sans délai.

Pour rap­pel, Apple ne com­mer­cialise plus de sys­tème Time Cap­sule ou Air­Port, Ex Cal­i­bra peut vous pro­pos­er d’ex­cel­lentes solu­tions éprou­vées avec les NAS Syn­ol­o­gy pour assur­er les sauve­g­ardes TimeMa­chine ou réseau sans fil mail­lé Mesh pour tout besoin en cou­ver­ture éten­due de réseau WiFi…

AirPort Base Station Firmware Update 7.9.1

Air­Port Base Sta­tion Firmware
Avail­able for: Air­Port Extreme and Air­Port Time Cap­sule base sta­tions with 802.11ac
Impact: A remote attack­er may be able to leak mem­o­ry
Descrip­tion: An out-of-bounds read was addressed with improved input val­i­da­tion.
CVE-2019–8581: Lucio Albornoz

Air­Port Base Sta­tion Firmware
Avail­able for: Air­Port Extreme and Air­Port Time Cap­sule base sta­tions with 802.11ac
Impact: A remote attack­er may be able to cause a sys­tem denial of ser­vice
Descrip­tion: A null point­er deref­er­ence was addressed with improved input val­i­da­tion.
CVE-2019–8588: Vince Cali (@0x56)

Air­Port Base Sta­tion Firmware
Avail­able for: Air­Port Extreme and Air­Port Time Cap­sule base sta­tions with 802.11ac
Impact: A remote attack­er may be able to cause a sys­tem denial of ser­vice
Descrip­tion: A denial of ser­vice issue was addressed with improved val­i­da­tion.
CVE-2018–6918: Maxime Villard

Air­Port Base Sta­tion Firmware
Avail­able for: Air­Port Extreme and Air­Port Time Cap­sule base sta­tions with 802.11ac
Impact: A remote attack­er may be able to cause arbi­trary code exe­cu­tion
Descrip­tion: A use after free issue was addressed with improved mem­o­ry man­age­ment.
CVE-2019–8578: Maxime Villard

Air­Port Base Sta­tion Firmware
Avail­able for: Air­Port Extreme and Air­Port Time Cap­sule base sta­tions with 802.11ac
Impact: A base sta­tion fac­to­ry reset may not delete all user infor­ma­tion
Descrip­tion: The issue was addressed with improved data dele­tion.
CVE-2019–8575: joshua stein

Air­Port Base Sta­tion Firmware
Avail­able for: Air­Port Extreme and Air­Port Time Cap­sule base sta­tions with 802.11ac
Impact: An attack­er in a priv­i­leged posi­tion may be able to per­form a denial of ser­vice attack
Descrip­tion: A denial of ser­vice issue was addressed with improved mem­o­ry han­dling.
CVE-2019–7291: Maxime Villard

Air­Port Base Sta­tion Firmware
Avail­able for: Air­Port Extreme and Air­Port Time Cap­sule base sta­tions with 802.11ac
Impact: Source-rout­ed IPv4 pack­ets may be unex­pect­ed­ly accept­ed
Descrip­tion: Source-rout­ed IPv4 pack­ets were dis­abled by default.
CVE-2019–8580: Maxime Villard

Air­Port Base Sta­tion Firmware
Avail­able for: Air­Port Extreme and Air­Port Time Cap­sule base sta­tions with 802.11ac
Impact: A remote attack­er may be able to cause arbi­trary code exe­cu­tion
Descrip­tion: A null point­er deref­er­ence was addressed with improved input val­i­da­tion.
CVE-2019–8572: Maxime Villard