CVE-2017-5545: Critical severity libimobiledevice libplist vulnerability
The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5545?
CVE-2017-5545 is considered to have a medium severity level due to its potential to cause denial of service and expose sensitive information.
How do I fix CVE-2017-5545?
To fix CVE-2017-5545, upgrade libplist to version 1.13 or later.
What versions of libplist are affected by CVE-2017-5545?
CVE-2017-5545 affects all versions of libplist up to and including 1.12.
What kind of attacks can CVE-2017-5545 facilitate?
CVE-2017-5545 can facilitate attacks that lead to denial of service through buffer over-reads or exposure of sensitive information from process memory.
What is the source of the vulnerability in CVE-2017-5545?
The vulnerability in CVE-2017-5545 originates from improper handling of Apple Property List data in the libplist library.