CVE-2017-13906 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Macos

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents4 sources

Severity

7.8HIGHNVD

EPSS

0.2%

top 55.09%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Macos Apple MAC OS X

Timeline

PublishedDec 23

Latest updateDec 24

Description

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A malicious application may be able to elevate privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5apple/macosunspecified — 10.13

▶NVDapple/mac_os_x10.11 — 10.11.6+2

🔴Vulnerability Details

GHSA

GHSA-m3pq-c5jj-f5gj: A memory corruption issue was addressed with improved memory handling↗2021-12-24

▶

CVEList

CVE-2017-13906: A memory corruption issue was addressed with improved memory handling↗2021-12-23

▶

📋Vendor Advisories

Apple

CVE-2017-13906: macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan↗2017-10-31

▶

Apple

CVE-2017-13906: macOS High Sierra 10.13↗2017-09-25

▶