PT-2021-8556 · Apple · Macos Sierra+2

Published 2021-12-23 · Updated 2022-01-04 · CVE-2017-13906

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS High Sierra versions prior to 10.13.1 macOS Sierra versions prior to Security Update 2017-001 macOS El Capitan versions prior to Security Update 2017-004

Description A memory corruption issue was addressed with improved memory handling. A malicious application may be able to elevate privileges.

Recommendations For macOS High Sierra versions prior to 10.13.1, update to macOS High Sierra 10.13.1 or later. For macOS Sierra versions prior to Security Update 2017-001, apply Security Update 2017-001 or later. For macOS El Capitan versions prior to Security Update 2017-004, apply Security Update 2017-004 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-13906

Affected Products

Macos El Capitan

Macos High Sierra

Macos Sierra

References · 4

• https://support.apple.com/en-us/HT208221 · Vendor Advisory
• https://support.apple.com/en-us/HT208144 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13906 · Security Note
• https://osv.dev/vulnerability/CVE-2017-13906 · Vendor Advisory