CVE-2014-1361

CVE-2014-1361 describes a vulnerability in Apple's Secure Transport, affecting iOS before 7.1.2, OS X before 10.9.4, and Apple TV before 6.1.2. This flaw allows remote attackers to obtain potentially sensitive information from uninitialized process memory. The vulnerability arises because the system fails to ensure that a DTLS message is accepted only for a DTLS connection, permitting a DTLS message within a TLS connection. Rated with a CVSS score of 5.0, this vulnerability has a low attack complexity and requires no authentication, making it easily exploitable remotely over the network. The primary impact is a partial loss of confidentiality (C:P), as attackers could gain access to sensitive information. There is no impact on integrity or availability. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, indicating a low level of public awareness or concern regarding this specific vulnerability.