PT-2017-13101 · Apple · Apple Macos

Dmytro Oleksiuk · Publicado 2017-11-13 · Atualizado 2019-10-03 · CVE-2017-13786

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.1

Description The issue involves the APFS component, which does not properly restrict the DMA mapping time of FileVault decryption buffers. This allows attackers to read cleartext APFS data via a crafted Thunderbolt adapter.

Recommendations For macOS versions prior to 10.13.1, update to version 10.13.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-13786

Produtos afetados

Apple Macos

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-13786 · Nota de Segurança
• http://securitytracker.com/id/1039710 · Nota
• https://osv.dev/vulnerability/CVE-2017-13786 · Aviso do Fabricante
• https://support.apple.com/HT208221 · Aviso do Fabricante