PT-2017-17447 · Apple+4 · Ios+5

Published 2017-05-30 · Updated 2024-06-15 · CVE-2017-7000

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10.3.2 Apple macOS versions prior to 10.12.5

Description The issue involves the SQLite component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

Recommendations For iOS versions prior to 10.3.2, update to version 10.3.2 or later to resolve the issue. For macOS versions prior to 10.12.5, update to version 10.12.5 or later to resolve the issue.

Fix

RCE

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-2025

ALT-PU-2017-2248

ALT-PU-2021-1379

ALT-PU-2021-2141

ALT-PU-2021-2411

ALT-PU-2024-8361

CVE-2017-7000

DSA-3926-1

MGASA-2017-0238

OPENSUSE-SU-2017:1993-1

OPENSUSE-SU-2017:1994-1

OPENSUSE-SU-2017_1993-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2017:1833

RHSA-2017_1833

ZDI-17-367

Affected Products

Alt Linux

Red Hat

Sqlite

Suse

Ios

Apple Macos

References · 2337

• https://osv.dev/vulnerability/DSA-3926-1 · Vendor Advisory
• https://debian.org/security/2017/dsa-3926 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-17-367 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-7000 · Vendor Advisory
• https://security.gentoo.org/glsa/201709-15 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/5LTI7HXMO72BGOW6GWY4GIWPZBXLF3UH · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10681-1 · Vendor Advisory
• https://support.apple.com/HT207798 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7000 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0238 · Vendor Advisory
• https://support.apple.com/HT207797 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2017:1994-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0238.html · Security Note
• https://osv.dev/vulnerability/CVE-2017-7000 · Vendor Advisory