CVE-2017-13892
First published: Wed Dec 06 2017(Updated: )
Contacts. An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information.
Credit: Ryan Manly Glenbrook High School District 225 product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS High Sierra | <10.13.2 | 10.13.2 |
| Apple Sierra | ||
| Apple El Capitan | ||
| Apple Mac OS X | >=10.11<10.11.6 | |
| Apple Mac OS X | >=10.12<10.12.6 | |
| Apple Mac OS X | =10.11.6 | |
| Apple Mac OS X | =10.11.6-security_update_2016-001 | |
| Apple Mac OS X | =10.11.6-security_update_2016-002 | |
| Apple Mac OS X | =10.11.6-security_update_2016-003 | |
| Apple Mac OS X | =10.11.6-security_update_2017-001 | |
| Apple Mac OS X | =10.11.6-security_update_2017-002 | |
| Apple Mac OS X | =10.11.6-security_update_2017-003 | |
| Apple Mac OS X | =10.11.6-security_update_2017-004 | |
| Apple Mac OS X | =10.12.6 | |
| Apple Mac OS X | =10.12.6-security_update_2017-001 | |
| Apple macOS | <10.13.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT208331 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2017-13887
- CVE-2017-9798
- CVE-2017-13905
- CVE-2017-7172
- CVE-2017-13892
- CVE-2017-7171
- CVE-2017-7151
- CVE-2017-1000254
- CVE-2017-13872
- CVE-2017-15422
- CVE-2017-13883
- CVE-2017-7163
- CVE-2017-7155
- CVE-2017-13878
- CVE-2017-13875
- CVE-2017-7159
- CVE-2017-13848
- CVE-2017-13858
- CVE-2017-13847
- CVE-2017-7162
- CVE-2017-13904
- CVE-2017-5754
- CVE-2017-13862
- CVE-2017-13867
- CVE-2017-7173
- CVE-2017-13876
- CVE-2017-13855
- CVE-2017-13865
- CVE-2017-13868
- CVE-2017-13869
- CVE-2017-7154
- CVE-2017-13871
- CVE-2017-13860
- CVE-2017-3735
- CVE-2017-12837
- CVE-2017-7158
- CVE-2017-13911
- CVE-2017-13886
Frequently Asked Questions
What is CVE-2017-13892?
CVE-2017-13892 is a vulnerability in the handling of Contact sharing on macOS High Sierra, Sierra, and El Capitan.
How severe is CVE-2017-13892?
CVE-2017-13892 has a severity rating of 7.5 out of 10.
Which versions of macOS High Sierra are affected by CVE-2017-13892?
CVE-2017-13892 affects macOS High Sierra 10.13.2 and earlier versions.
Which versions of Sierra and El Capitan are affected by CVE-2017-13892?
CVE-2017-13892 affects all versions of Sierra and El Capitan.
How can I fix CVE-2017-13892?
To fix CVE-2017-13892, update your macOS to High Sierra 10.13.2, Security Update 2017-002 Sierra, or Security Update 2017-005 El Capitan.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/apple-support
- agent/software-canonical-lookup-request
- agent/references
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/tags
- agent/trending
- vendor/apple
- canonical/apple mac os x
- version/apple mac os x/10.11
- version/apple mac os x/10.12
- version/apple mac os x/10.11.6
- version/apple mac os x/10.11.6-security_update_2016-001
- version/apple mac os x/10.11.6-security_update_2016-002
- version/apple mac os x/10.11.6-security_update_2016-003
- version/apple mac os x/10.11.6-security_update_2017-001
- version/apple mac os x/10.11.6-security_update_2017-002
- version/apple mac os x/10.11.6-security_update_2017-003
- version/apple mac os x/10.11.6-security_update_2017-004
- version/apple mac os x/10.12.6
- version/apple mac os x/10.12.6-security_update_2017-001
- canonical/apple macos
- canonical/apple macos high sierra
- canonical/apple sierra
- canonical/apple el capitan