CVE-2017-7116

Опубликовано: 23 окт. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to read data from kernel memory locations via crafted Wi-Fi traffic.

Ссылки

http://www.securityfocus.com/bid/100927
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039385
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=1318
Issue Tracking
Third Party Advisory
https://support.apple.com/HT208112
Vendor Advisory
https://support.apple.com/HT208113
Vendor Advisory
https://support.apple.com/HT208115
Vendor Advisory
http://www.securityfocus.com/bid/100927
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039385
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=1318
Issue Tracking
Third Party Advisory
https://support.apple.com/HT208112
Vendor Advisory
https://support.apple.com/HT208113
Vendor Advisory
https://support.apple.com/HT208115
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 10.3.3 (включая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 10.2.2 (включая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 3.2.3 (включая)

EPSS

Процентиль: 73%

0.00782

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-7vf3-xr3j-6xv6