CVE-2017-2370: Buffer Overflow

Reference Links

• https://support.apple.com/en-us/HT207482 (Advisory)
• http://www.securityfocus.com/bid/95731
• http://www.securitytracker.com/id/1037668
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1004
• https://support.apple.com/HT207482
• https://support.apple.com/HT207483
• https://support.apple.com/HT207485
• https://support.apple.com/HT207487
• https://www.exploit-db.com/exploits/41163/

Parent vulnerabilities

(Appears in the following advisories)

• HT207482

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2017-2383
• CVE-2017-2375
• CVE-2017-2368
• CVE-2017-2370
• CVE-2017-2360
• CVE-2016-8687
• CVE-2017-2352
• CVE-2017-2350
• CVE-2017-2354
• CVE-2017-2362
• CVE-2017-2373
• CVE-2017-2355
• CVE-2017-2356
• CVE-2017-2369
• CVE-2017-2366
• CVE-2017-2363
• CVE-2017-2364
• CVE-2017-2371
• CVE-2017-2365
• CVE-2017-2351

Frequently Asked Questions

• What is the severity of CVE-2017-2370?

  CVE-2017-2370 is considered a high severity vulnerability due to its potential for exploitation through a buffer overflow.

• How do I fix CVE-2017-2370?

  To fix CVE-2017-2370, users must update their affected Apple devices to the latest versions: iOS 10.2.1, macOS 10.12.3, watchOS 3.1.3, or tvOS 10.1.1.

• Which products are affected by CVE-2017-2370?

  CVE-2017-2370 affects Apple products including iOS before 10.2.1, macOS before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3.

• Can CVE-2017-2370 lead to remote code execution?

  Yes, CVE-2017-2370 can potentially allow remote code execution on vulnerable Apple devices due to the buffer overflow.

• What is the nature of the vulnerability in CVE-2017-2370?

  CVE-2017-2370 is a buffer overflow issue that was addressed through improved memory handling within the kernel.