CVE-2017-2357: Infoleak
Published Feb 20, 2017
·Updated
An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "IOAudioFamily" component. It allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
Affected Software
1 affected component
Apple iOS and macOS<=10.12.2
Event History
Feb 20, 2017
CVE Published
via MITRE·08:35 AM
Data Sourced
via MITRE·08:35 AM
Description
Data Sourced
via NVD·08:59 AM
DescriptionSeverityWeaknessAffected Software
Dec 14, 58332
Event
01:15 PM
Frequently Asked Questions
1
What is the severity of CVE-2017-2357?
CVE-2017-2357 has been classified with a high severity rating due to its potential to expose sensitive kernel memory-layout information.
2
How do I fix CVE-2017-2357?
The best way to fix CVE-2017-2357 is to update your macOS to version 10.12.3 or later.
3
What components are affected by CVE-2017-2357?
The CVE-2017-2357 vulnerability specifically affects the "IOAudioFamily" component in macOS.
4
Which versions of macOS are vulnerable to CVE-2017-2357?
macOS versions up to and including 10.12.2 are vulnerable to CVE-2017-2357.
5
Can an attacker exploit CVE-2017-2357 remotely?
CVE-2017-2357 requires a crafted application to exploit the vulnerability, indicating a requirement for local access.