CVE-2017-6975: Buffer Overflow
Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point. NOTE: because an operating system could potentially isolate itself from CVE-2017-6956 exploitation without patching Broadcom firmware functions, there is a separate CVE ID for the operating-system behavior.
Other sources
Wi-Fi. A stack buffer overflow was addressed through improved input validation.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apple TVto a version that resolves this vulnerability.Fixed in 7.3 - Upgrade
Upgrade
Apple iOSto a version that resolves this vulnerability.Fixed in 10.3.1 - Compensating control
Mitigate CVE-2017-6956 exploitation via crafted access points by preventing iOS Wi‑Fi from being used with untrusted access points (the text states iOS before 10.3.1 does not prevent exploitation via crafted APs).
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2017-6975?
CVE-2017-6975 is considered a critical vulnerability due to its potential for exploitation via crafted access points.
How do I fix CVE-2017-6975?
To fix CVE-2017-6975, update your iOS or Apple TV software to versions 10.3.1 or later.
What versions of iOS are affected by CVE-2017-6975?
CVE-2017-6975 affects all Apple iOS versions prior to 10.3.1.
Can CVE-2017-6975 affect Apple TV?
Yes, CVE-2017-6975 can affect Apple TV Software versions earlier than 7.3.
What type of vulnerability is CVE-2017-6975?
CVE-2017-6975 is a stack buffer overflow vulnerability related to Wi-Fi in Apple devices.