CVE-2017-2354: Buffer Overflow

Reference Links

• https://support.apple.com/en-us/HT207482 (Advisory)
• http://www.securityfocus.com/bid/95736
• http://www.securitytracker.com/id/1037668
• https://security.gentoo.org/glsa/201706-15
• https://support.apple.com/HT207481
• https://support.apple.com/HT207482
• https://support.apple.com/HT207484
• https://support.apple.com/HT207485
• https://support.apple.com/HT207486

Parent vulnerabilities

(Appears in the following advisories)

• HT207482

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2017-2383
• CVE-2017-2375
• CVE-2017-2368
• CVE-2017-2370
• CVE-2017-2360
• CVE-2016-8687
• CVE-2017-2352
• CVE-2017-2350
• CVE-2017-2354
• CVE-2017-2362
• CVE-2017-2373
• CVE-2017-2355
• CVE-2017-2356
• CVE-2017-2369
• CVE-2017-2366
• CVE-2017-2363
• CVE-2017-2364
• CVE-2017-2371
• CVE-2017-2365
• CVE-2017-2351

Frequently Asked Questions

• What is the severity of CVE-2017-2354?

  CVE-2017-2354 has been classified with a high severity rating due to the potential for memory corruption issues.

• How do I fix CVE-2017-2354?

  To fix CVE-2017-2354, users should update their affected Apple products to the latest versions which address the memory corruption vulnerabilities.

• Which Apple products are affected by CVE-2017-2354?

  CVE-2017-2354 affects Apple iOS versions prior to 10.2.1, Safari versions before 10.0.3, and iCloud versions before 6.1.1 among others.

• Is CVE-2017-2354 exploited in the wild?

  There is no specific information confirming that CVE-2017-2354 is actively exploited in the wild, but it is advisable to apply updates due to its severity.

• When was CVE-2017-2354 disclosed?

  CVE-2017-2354 was disclosed in January 2017 as part of a series of updates addressing memory corruption vulnerabilities in WebKit.