Vulnerability CVE-2017-7154

Vulnerability CVE-2017-7154

Published: 2017-12-27

Description:

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (system crash).

See advisories in our WLB2 database:

	Topic	Author	Date
Low	macOS process_policy Stack Leak Through Uninitialized Field	Google Security ...	12.01.2018

Type:

CWE-20

(Improper Input Validation)

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:N/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
5.6/10	7.8/10	3.9/10

Exploit range	Attack complexity	Authentication
Local	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	None	Complete

Affected software
Apple -> Apple tv
Apple -> Iphone os
Apple -> Mac os x
Apple -> TVOS

References:

http://www.securityfocus.com/bid/103134

https://support.apple.com/HT208327

https://support.apple.com/HT208331

https://support.apple.com/HT208334

https://www.exploit-db.com/exploits/43521/

Copyright 2024, cxsecurity.com