Firmware Update: Apple AirPort Base Station 7.9.1

Apple has released new firmware for the AirPort Base Station. The device automatically checks for an update once a week and then flashes the orange light. Installing the new firmware must be done manually. To do this, the user must AirPort Utility start, click Update Firmware and follow the prompts. Release 7.9.1 includes the following changes and improvements:

About AirPort Base Station Firmware Update 7.9.1

Firmware update 7.9.1 improves the security of your base station and is recommended for all AirPort Extreme and AirPort Time Capsule base stations with 802.11ac.

About the security content of AirPort Base Station Firmware Update 7.9.1

• A remote attacker may be able to leak memory – An out-of-bounds read was addressed with improved input validation. CVE-2019-8581
• A remote attacker may be able to cause a system denial of service – A null pointer dereference was addressed with improved input validation. CVE-2019-8588
• A remote attacker may be able to cause a system denial of service – A denial of service issue was addressed with improved validation. CVE-2018-6918
• A remote attacker may be able to cause arbitrary code execution – A use after free issue was addressed with improved memory management. CVE-2019-8578
• A base station factory reset may not delete all user information – The issue was addressed with improved data deletion. CVE-2019-8575
• An attacker in a privileged position may be able to perform a denial of service attack – A denial of service issue was addressed with improved memory handling. CVE-2019-7291
• Source-routed IPv4 packets may be unexpectedly accepted – Source-routed IPv4 packets were disabled by default. CVE-2019-8580
• A remote attacker may be able to cause arbitrary code execution – A null pointer dereference was addressed with improved input validation. CVE-2019-8572