CVE-2017-13817

An out-of-bounds read issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions...

CVE-2017-13841

Summary: CVE-2017-13841 affects macOS before 10.13.1, in the Kernel, enabling an attacker to bypass memory-read restrictions via a crafted app. The issue is documented across the NVD/NVD description and Apple security updates entries, which associate the vulnerability with kernel memory access an...

CVE-2017-13840

CVE-2017-13840 affects macOS before 10.13.1 in the Kernel component. A crafted app can bypass memory-read restrictions, potentially exposing restricted memory. Remediation: upgrade to macOS 10.13.1 (or later) as provided by Apple.

CVE-2017-13818

CVE-2017-13818 affects macOS prior to 10.13.1, specifically the Kernel. A crafted app can bypass memory-read restrictions, effectively reading restricted kernel memory. This is a local bypass vulnerability; the issue is documented by NVD/NIST with Apple references. Remediation: update macOS to 10...

CVE-2017-13821

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFString" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13841

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13836

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13818

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13842

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-13836

CVE-2017-13836 affects macOS pre-10.13.1, in the Kernel, allowing a crafted app to bypass memory-read restrictions. The issue is mitigated by upgrading to macOS 10.13.1 or later (no other remediation details provided). Exploitation status/exploit specifics are not disclosed in the provided docume...

CVE-2017-13817

CVE-2017-13817 is an out-of-bounds read vulnerability reported in the macOS Kernel affecting macOS versions prior to 10.13.1. The issue allows a local user to bypass memory-read restrictions and read kernel memory. The description and linked sources (NVD entry for CVE-2017-13817 and Apple Securit...

CVE-2017-13840

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

PT-2017-13097 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.13.1 Description: The issue involves the "Kernel" component and allows attackers to bypass intended memory-read restrictions. This is achieved via a /dev/dtracehelper attack that involves the dtrace dif variable and...

CVE-2017-13782

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a /dev/dtracehelper attack involving the dtracedifvariable and dtracegetarg functions...

CVE-2017-13782

CVE-2017-13782 concerns memory-read restriction bypass in macOS via the Kernel, specifically involving /dev/dtracehelper and related dtrace functions. The provided connected document from PacketStorm describes a PoC for a separate macOS kernel privilege-escalation issue in the XNU kernel related ...

CVE-2017-2892

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and remote code...

CVE-2017-2892

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and remote code...

Information disclosure

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker...

CVE-2017-2895

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker...

CVE-2017-2895

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker...