CVE-2017-13817 — Out-of-bounds Read in Apple MAC OS X

CWE-125 — Out-of-bounds Read7 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 81.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Apple MAC OS XApple IOSApple Macos High Sierra+3 more
Timeline
PublishedNov 13
Latest updateMay 17

Description

An out-of-bounds read issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages6 packages

▶NVDapple/mac_os_x10.13.0
▶Appleapple/ios11
▶Appleapple/tvos11

🔴Vulnerability Details

1
GHSA
GHSA-v47p-xffg-q788: An out-of-bounds read issue was discovered in certain Apple products↗2022-05-17
▶

📋Vendor Advisories

5
Apple
CVE-2017-13817: macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan↗2017-10-31
▶
Apple
CVE-2017-13817: macOS High Sierra 10.13↗2017-09-25
▶
Apple
CVE-2017-13817: watchOS 4↗2017-09-19
▶
Apple
CVE-2017-13817: tvOS 11↗2017-09-19
▶
Apple
CVE-2017-13817: iOS 11↗2017-09-19
▶