CVE-2017-8665

Опубликовано: 15 авг. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Средний

Описание

The Xamarin.iOS update component on systems running macOS allows an attacker to run arbitrary code as root, aka "Xamarin.iOS Elevation Of Privilege Vulnerability."

Ссылки

http://www.securityfocus.com/bid/100308
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8665
Patch
Release Notes
Vendor Advisory
https://www.exploit-db.com/exploits/42454/
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/100308
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8665
Patch
Release Notes
Vendor Advisory
https://www.exploit-db.com/exploits/42454/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:xamarin.ios:*:*:*:*:*:*:*:*

Версия до 10.11 (включая)

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.2066

Средний

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-732

Связанные уязвимости

CVE-2017-8665

msrc

почти 8 лет назад

Xamarin.iOS Elevation Of Privilege Vulnerability

GHSA-4hj8-x4jj-w73c