CVE-2023-42897: Race Condition
First published: Mon Dec 11 2023(Updated: )
Accessibility. A privacy issue was addressed with improved private data redaction for log entries.
Credit: Andrew Goldberg The McCombs School of BusinessThe University Texas at Austin product-security@apple.com Noah Roskin-Frazee Pr Kirin @Pwnrin Mickey Jin @patch1t an anonymous researcher Marc Newlin SkySafeChristopher Reynolds Aymane Chabat Wojciech Regula SecuRingZhenjiang Zhao Pangu TeamQianxin Junsung Lee Meysam Firouzi @R00tkitSMM Michael DePlante @izobashi Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG PteEloi Benoist-Vanderbeken @elvanderb SynacktivCVE-2023-42893 ARJUN S D Csaba Fitzl @theevilbit OffSecZhongquan Li @Guluisacat Dawn Security Lab of JingDongCsaba Fitzl @theevilbit Offensive SecurityJoshua Jewett @JoshJewett33 Pwn2car Zoom Offensive Security Team Nan Wang @eternalsakura13 360 Vulnerability Research Instituterushikesh nandedkar SungKwon Lee (Demon.Team)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS and iPadOS | <17.2 | 17.2 |
| Apple iOS, iPadOS, and macOS | <17.2 | 17.2 |
| Apple iOS, iPadOS, and macOS | >=17.0<17.2 | |
| iPhone OS | >=17.0<17.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2023-42937
- CVE-2023-42919
- CVE-2023-42896
- CVE-2023-42884
- CVE-2023-45866
- CVE-2023-42941
- CVE-2023-42962
- CVE-2023-42922
- CVE-2023-42898
- CVE-2023-42899
- CVE-2023-42888
- CVE-2023-42974
- CVE-2023-42914
- CVE-2023-42893
- CVE-2023-42923
- CVE-2023-42936
- CVE-2023-42897
- CVE-2023-42947
- CVE-2023-40389
- CVE-2023-42890
- CVE-2023-42883
- CVE-2023-42950
- CVE-2023-42956
Frequently Asked Questions
What is the severity of CVE-2023-42897?
CVE-2023-42897 is classified as a high severity vulnerability due to the potential for unauthorized access to sensitive user data.
How do I fix CVE-2023-42897?
To fix CVE-2023-42897, update your device to iOS 17.2 or iPadOS 17.2.
Who is affected by CVE-2023-42897?
CVE-2023-42897 affects users of iOS versions between 17.0 and 17.2 and iPadOS versions between 17.0 and 17.2.
What type of exploit is associated with CVE-2023-42897?
CVE-2023-42897 may be exploited by attackers with physical access to the device, allowing them to use Siri to access sensitive information.
What does CVE-2023-42897 involve?
CVE-2023-42897 involves a vulnerability in Siri that allows access to sensitive user data if the proper checks are not in place.
- agent/type
- agent/first-publish-date
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- collector/apple-support
- source/Apple
- alias/CVE-2023-42896
- alias/CVE-2023-42884
- alias/CVE-2023-45866
- alias/CVE-2023-42941
- alias/CVE-2023-42962
- alias/CVE-2023-42922
- alias/CVE-2023-42898
- alias/CVE-2023-42899
- alias/CVE-2023-42888
- alias/CVE-2023-42974
- alias/CVE-2023-42914
- alias/CVE-2023-42893
- alias/CVE-2023-42923
- alias/CVE-2023-42936
- alias/CVE-2023-42897
- alias/CVE-2023-42947
- alias/CVE-2023-40389
- alias/CVE-2023-42890
- alias/CVE-2023-42883
- alias/CVE-2023-42950
- alias/CVE-2023-42956
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- alias/CVE-2023-42919
- collector/nvd-api
- vendor/apple
- canonical/apple ios and ipados
- canonical/apple ios, ipados, and macos
- version/apple ios, ipados, and macos/17.0
- canonical/iphone os
- version/iphone os/17.0