CVE-2017-6975

Опубликовано: 05 апр. 2017

Источник: nvd

CVSS3: 6.8

CVSS2: 7.2

EPSS Низкий

Описание

Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point. NOTE: because an operating system could potentially isolate itself from CVE-2017-6956 exploitation without patching Broadcom firmware functions, there is a separate CVE ID for the operating-system behavior.

Ссылки

http://seclists.org/fulldisclosure/2019/May/24
http://www.securityfocus.com/bid/97328
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038172
https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html
Exploit
Technical Description
Third Party Advisory
https://seclists.org/bugtraq/2019/May/30
https://support.apple.com/HT207688
Vendor Advisory
https://support.apple.com/kb/HT210121
https://twitter.com/4Dgifts/status/849268365457850370
Third Party Advisory
http://seclists.org/fulldisclosure/2019/May/24
http://www.securityfocus.com/bid/97328
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038172
https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html
Exploit
Technical Description
Third Party Advisory
https://seclists.org/bugtraq/2019/May/30
https://support.apple.com/HT207688
Vendor Advisory
https://support.apple.com/kb/HT210121
https://twitter.com/4Dgifts/status/849268365457850370
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 10.3 (включая)

EPSS

Процентиль: 19%

0.00061

Низкий

6.8 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-4hvm-x6v7-c64m

CVSS3: 6.8

github

больше 3 лет назад

BDU:2017-00942

fstec

почти 9 лет назад

Уязвимость операционной системы iOS, позволяющая нарушителю вызвать отказ в обслуживании