CVE-2017-13822

CVE-2017-13822 affects macOS up to 10.13.0; the issue is in the Quick Look component, allowing a crafted app to bypass memory-read restrictions and read restricted memory. Affected product/area: macOS Quick Look. Root cause: memory-restriction bypass via crafted app. Impact: attacker can read res...

CVE-2017-13842

The CVE-2017-13842 entry applies to Apple macOS Kernel on affected systems prior to macOS 10.13.1, where a crafted app can bypass memory-read restrictions, enabling a local attacker to read restricted memory. This is described as a memory-read bypass in the Kernel component with a mitigating patc...

CVE-2017-13818

CVE-2017-13818 affects macOS prior to 10.13.1, specifically the Kernel. A crafted app can bypass memory-read restrictions, effectively reading restricted kernel memory. This is a local bypass vulnerability; the issue is documented by NVD/NIST with Apple references. Remediation: update macOS to 10...

CVE-2017-13840

CVE-2017-13840 affects macOS before 10.13.1 in the Kernel component. A crafted app can bypass memory-read restrictions, potentially exposing restricted memory. Remediation: upgrade to macOS 10.13.1 (or later) as provided by Apple.

CVE-2017-13821

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFString" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13841

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13840

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13836

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13836

CVE-2017-13836 affects macOS pre-10.13.1, in the Kernel, allowing a crafted app to bypass memory-read restrictions. The issue is mitigated by upgrading to macOS 10.13.1 or later (no other remediation details provided). Exploitation status/exploit specifics are not disclosed in the provided docume...

CVE-2017-13842

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13818

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13817

CVE-2017-13817 is an out-of-bounds read vulnerability reported in the macOS Kernel affecting macOS versions prior to 10.13.1. The issue allows a local user to bypass memory-read restrictions and read kernel memory. The description and linked sources (NVD entry for CVE-2017-13817 and Apple Securit...

CVE-2017-13782

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a /dev/dtracehelper attack involving the dtracedifvariable and dtracegetarg functions...

PT-2017-13097 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.13.1 Description: The issue involves the "Kernel" component and allows attackers to bypass intended memory-read restrictions. This is achieved via a /dev/dtracehelper attack that involves the dtrace dif variable and...

CVE-2017-13782

CVE-2017-13782 concerns memory-read restriction bypass in macOS via the Kernel, specifically involving /dev/dtracehelper and related dtrace functions. The provided connected document from PacketStorm describes a PoC for a separate macOS kernel privilege-escalation issue in the XNU kernel related ...

CVE-2017-2892

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and remote code...

CVE-2017-2892

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and remote code...

Information disclosure

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker...

CVE-2017-2895

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker...

CVE-2017-2895

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker...