CVE-2017-2389 — Apple Iphone OS vulnerability

5 documents4 sources
Severity
8.1HIGHNVD
EPSS
1.0%
top 23.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple Iphone OSApple SafariApple IOS
Timeline
PublishedApr 2
Latest updateMay 13

Description

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof an HTTP authentication sheet or cause a denial of service via a crafted web site.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:HExploitability: 2.8 | Impact: 5.2

Affected Packages4 packages

▶NVDapple/safari10.0.3
▶Appleapple/safari10.1
▶NVDapple/iphone_os10.2.1
▶Appleapple/ios10.3

🔴Vulnerability Details

1
GHSA
GHSA-fmcm-gq74-h2x3: An issue was discovered in certain Apple products↗2022-05-13
▶

📋Vendor Advisories

2
Apple
CVE-2017-2389: iOS 10.3↗2017-03-27
▶
Apple
CVE-2017-2389: Safari 10.1↗2017-03-27
▶

💬Community

1
Bugzilla
CVE-2017-10984 freeradius: Out-of-bounds write in data2vp_wimax()↗2017-07-07
▶
CVE-2017-2389 — Apple Iphone OS vulnerability | cvebase