CVE-2017-13887 — Apple Macos High Sierra 10.13.2 Security Update 2017-002 Sierra AND Security Update 20 vulnerability

CWE-3203 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 52.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MAC OS XApple Macos High Sierra 10.13.2 Security Update 2017-002 Sierra AND Security Update 20
Timeline
PublishedJan 11
Latest updateMay 14

Description

In macOS High Sierra before 10.13.2, a logic issue existed in APFS when deleting keys during hibernation. This was addressed with improved state management.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDapple/mac_os_x< 10.13.2

🔴Vulnerability Details

1
GHSA
GHSA-h4xx-mw8j-7vj2: In macOS High Sierra before 10↗2022-05-14
▶

📋Vendor Advisories

1
Apple
CVE-2017-13887: macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan↗2017-12-06
▶