ByteOS Network

NVD Vulnerability Details :

CVE-2017-13868

Deferred

Source-product-security@apple.com

Published At-25 Dec, 2017 | 21:29

Updated At-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N

CPE Matches

Apple Inc.

>>iphone_os>>Versions before 11.2(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>Versions before 10.13.2(exclusive)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Apple Inc.

>>tvos>>Versions before 11.2(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Apple Inc.

>>watchos>>Versions before 4.2(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/102100	product-security@apple.com	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039952	product-security@apple.com	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039953	product-security@apple.com	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039966	product-security@apple.com	Third Party Advisory VDB Entry
https://bazad.github.io/2018/03/a-fun-xnu-infoleak/	product-security@apple.com	Exploit Third Party Advisory
https://github.com/bazad/ctl_ctloutput-leak	product-security@apple.com	Exploit Third Party Advisory
https://support.apple.com/HT208325	product-security@apple.com	Vendor Advisory
https://support.apple.com/HT208327	product-security@apple.com	Vendor Advisory
https://support.apple.com/HT208331	product-security@apple.com	Vendor Advisory
https://support.apple.com/HT208334	product-security@apple.com	Vendor Advisory
http://www.securityfocus.com/bid/102100	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039952	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039953	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039966	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://bazad.github.io/2018/03/a-fun-xnu-infoleak/	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory
https://github.com/bazad/ctl_ctloutput-leak	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory
https://support.apple.com/HT208325	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://support.apple.com/HT208327	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://support.apple.com/HT208331	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://support.apple.com/HT208334	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History