First published: Tue Sep 19 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Kernel" component. It allows attackers to obtain sensitive network-activity information about arbitrary apps via a crafted app.
Credit: Xiaokuan Zhang Yinqian Zhang The Ohio State UniversityXueqiang Wang XiaoFeng Wang Indiana University Bloomington Xiaolong Bai Tsinghua University product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
tvOS | <11 | 11 |
macOS High Sierra | <10.13 | 10.13 |
Apple iOS, iPadOS, and watchOS | <11 | 11 |
Apple iOS, iPadOS, and watchOS | <4 | 4 |
iOS | <11.0 | |
Apple iOS and macOS | <10.13 | |
tvOS | <11.0 | |
Apple iOS, iPadOS, and watchOS | <4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2017-13873 is a vulnerability in certain Apple products that allows attackers to obtain sensitive network-activity information about arbitrary apps.
iOS before version 11, macOS before version 10.13, tvOS before version 11, and watchOS before version 4 are affected by CVE-2017-13873.
CVE-2017-13873 has a severity keyword of 'medium' and a severity value of 4.3.
To fix CVE-2017-13873, update your Apple product to the latest version of iOS, macOS, tvOS, or watchOS, depending on the affected product.
You can find more information about CVE-2017-13873 on the Apple support website: [https://support.apple.com/HT208112](https://support.apple.com/HT208112), [https://support.apple.com/HT208113](https://support.apple.com/HT208113), [https://support.apple.com/HT208115](https://support.apple.com/HT208115).