CVE-2017-7173: Infoleak
An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
Other sources
Kernel. An out-of-bounds read was addressed with improved bounds checking.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tvOSto a version that resolves this vulnerability.Fixed in 11.2 - Upgrade
Upgrade
macOS High Sierrato a version that resolves this vulnerability.Fixed in 10.13.2 - Upgrade
Upgrade
Apple iOS, iPadOS, and watchOSto a version that resolves this vulnerability.Fixed in 4.2 - Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 11.2 - Upgrade
Upgrade
macOSto a version that resolves this vulnerability.Fixed in 10.13.2
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7164
- CVE-2017-13905
- CVE-2017-7172
- CVE-2017-7171
- CVE-2017-7151
- CVE-2017-7162
- CVE-2017-13861
- CVE-2017-13904
- CVE-2017-5754
- CVE-2017-13862
- CVE-2017-13867
- CVE-2017-13876
- CVE-2017-7173
- CVE-2017-13855
- CVE-2017-13865
- CVE-2017-13868
- CVE-2017-13869
- CVE-2017-7154
- CVE-2017-13885
- CVE-2017-7165
- CVE-2017-13884
- CVE-2017-7153
- CVE-2017-7156
- CVE-2017-7157
- CVE-2017-13856
- CVE-2017-13870
- CVE-2017-7160
- CVE-2017-13866
- CVE-2017-13080
- CVE-2017-13887
- CVE-2017-9798
- CVE-2017-13892
- CVE-2017-1000254
- CVE-2017-13872
- CVE-2017-15422
- CVE-2017-13883
- CVE-2017-7163
- CVE-2017-7155
- CVE-2017-13878
- CVE-2017-13875
- CVE-2017-7159
- CVE-2017-13848
- CVE-2017-13858
- CVE-2017-13847
- CVE-2017-13871
- CVE-2017-13860
- CVE-2017-3735
- CVE-2017-12837
- CVE-2017-7158
- CVE-2017-13911
- CVE-2017-13886
- CVE-2017-13880
- CVE-2017-2411
- CVE-2017-13879
- CVE-2017-13874
- CVE-2017-7152
- CVE-2017-13888
- CVE-2017-13891
Frequently Asked Questions
What is CVE-2017-7173?
CVE-2017-7173 is a vulnerability in certain Apple products that allows attackers to bypass memory-read restrictions via a crafted app.
Which Apple products are affected by CVE-2017-7173?
macOS before 10.13.2, macOS High Sierra up to version 10.13.2, Sierra, El Capitan, watchOS up to version 4.2, iOS up to version 11.2, and tvOS up to version 11.2 are affected by CVE-2017-7173.
How severe is CVE-2017-7173?
CVE-2017-7173 has a severity rating of 5.5, which is considered medium.
How can I fix CVE-2017-7173?
To fix CVE-2017-7173, update your affected Apple products to the latest versions.
Where can I find more information about CVE-2017-7173?
You can find more information about CVE-2017-7173 on Apple's official support page: [link](https://support.apple.com/HT208331).