CVE-2017-7173 — Sensitive Information Exposure in Apple MAC OS X

CWE-200 — Sensitive Information Exposure6 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
4.1%
top 11.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Apple MAC OS XApple IOSApple Macos High Sierra 10.13.2 Security Update 2017-002 Sierra AND Security Update 20+2 more
Timeline
PublishedApr 3
Latest updateMay 14

Description

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages5 packages

▶NVDapple/mac_os_x< 10.13.2
▶Appleapple/ios11.2
▶Appleapple/tvos11.2
▶Appleapple/watchos4.2

🔴Vulnerability Details

1
GHSA
GHSA-ff3v-395x-qjg2: An issue was discovered in certain Apple products↗2022-05-14
▶

📋Vendor Advisories

4
Apple
CVE-2017-7173: macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan↗2017-12-06
▶
Apple
CVE-2017-7173: watchOS 4.2↗2017-12-05
▶
Apple
CVE-2017-7173: tvOS 11.2↗2017-12-04
▶
Apple
CVE-2017-7173: iOS 11.2↗2017-12-02
▶