CVE-2017-2381: High severity Apple iOS and macOS vulnerability
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "sudo" component. It allows remote authenticated users to gain privileges by leveraging membership in the admin group on a network directory server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2381?
CVE-2017-2381 is classified as a moderate-severity vulnerability that allows remote authenticated users to gain elevated privileges.
How do I fix CVE-2017-2381?
To fix CVE-2017-2381, update your macOS to version 10.12.4 or later.
Who is affected by CVE-2017-2381?
CVE-2017-2381 affects users of macOS versions prior to 10.12.4.
What does CVE-2017-2381 exploit?
CVE-2017-2381 exploits the 'sudo' component by allowing admin group members on a network directory server to gain unauthorized privileges.
Are there any workarounds for CVE-2017-2381?
There are no known workarounds for CVE-2017-2381; the best action is to apply the necessary software update.