Vulnerability CVE-2017-7066

Vulnerability CVE-2017-7066

Published: 2018-04-03

Description:

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. tvOS before 10.2.2 is affected. The issue involves the "Wi-Fi" component. It allows attackers to cause a denial of service (memory corruption on the Wi-Fi chip) by leveraging proximity for 802.11.

See advisories in our WLB2 database:

	Topic	Author	Date
Med.	Broadcom TCP KeepAlive Offloading DoS / Out-Of-Bounds Read	laginimaineb	28.09.2017

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:A/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
3.3/10	2.9/10	6.5/10

Exploit range	Attack complexity	Authentication
Adjacent network	Low	No required
Confidentiality impact	Integrity impact	Availability impact
None	None	Partial

Affected software
Apple -> Apple tv
Apple -> Iphone os
Apple -> TVOS

References:

https://support.apple.com/HT207923

https://support.apple.com/HT207924

Copyright 2024, cxsecurity.com