CVE-2017-13815 — Apple MAC OS X vulnerability

7 documents3 sources
Severity
9.8CRITICALNVD
EPSS
1.8%
top 17.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Apple MAC OS XApple IOSApple Macos High Sierra+3 more
Timeline
PublishedNov 13
Latest updateMay 17

Description

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party "file" product. Versions before 5.31 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages6 packages

▶NVDapple/mac_os_x10.13.0
▶Appleapple/ios11
▶Appleapple/tvos11

🔴Vulnerability Details

1
GHSA
GHSA-vp6p-5859-39vx: An issue was discovered in certain Apple products↗2022-05-17
▶

📋Vendor Advisories

5
Apple
CVE-2017-13815: macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan↗2017-10-31
▶
Apple
CVE-2017-13815: macOS High Sierra 10.13↗2017-09-25
▶
Apple
CVE-2017-13815: watchOS 4↗2017-09-19
▶
Apple
CVE-2017-13815: iOS 11↗2017-09-19
▶
Apple
CVE-2017-13815: tvOS 11↗2017-09-19
▶