PT-2021-8555 · Apple · Watchos+3

5Aelo + 1 · Published 2021-12-23 · Updated 2022-01-12 · CVE-2017-13905

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.2 Apple macOS versions prior to 10.13.2 Apple tvOS versions prior to 11.2 Apple watchOS versions prior to 4.2

Description A race condition was addressed with additional validation. This issue allows an application to potentially gain elevated privileges.

Recommendations For Apple iOS versions prior to 11.2, update to iOS 11.2 or later. For Apple macOS versions prior to 10.13.2, apply Security Update 2017-002 Sierra or later, or update to macOS High Sierra 10.13.2 or later. For Apple tvOS versions prior to 11.2, update to tvOS 11.2 or later. For Apple watchOS versions prior to 4.2, update to watchOS 4.2 or later. For macOS El Capitan, apply Security Update 2017-005 El Capitan or later.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2017-13905

Affected Products

Ios

Apple Macos

Tvos

Watchos

References · 7

• https://osv.dev/vulnerability/CVE-2017-13905 · Vendor Advisory
• https://support.apple.com/en-us/HT208325 · Vendor Advisory
• https://support.apple.com/en-us/HT208334 · Vendor Advisory
• https://support.apple.com/en-us/HT208327 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13905 · Security Note
• https://support.apple.com/en-us/HT208331 · Vendor Advisory
• https://t.me/cibsecurity/34586 · Telegram Post