Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-rea...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-7036

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-7028

CVE-2017-7028 affects Apple kernel on iOS (pre-10.3.3), macOS (pre-10.12.6), tvOS (pre-10.2.2), and watchOS (pre-3.2.3). Root cause: a validation/memory-read control gap in the Kernel that could let an app read restricted memory. Impact: an attacker could read memory contents that should be prote...

CVE-2017-7067

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-7064

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-rea...

CVE-2017-7067

CVE-2017-7067 affects macOS Sierra (pre-10.12.6) in the Kernel component and allows a crafted app to bypass memory-read restrictions. Affected systems could enable local privilege consequences; Apple’s updates (macOS 10.12.6 / Security Update 2017-003) address this by applying memory-management a...

CVE-2017-7029

CVE-2017-7029 affects Apple devices with a Kernel memory access issue. A crafted iOS app can bypass memory-read restrictions, potentially exposing restricted memory. Affected software: iOS < 10.3.3, macOS < 10.12.6, tvOS < 10.2.2, watchOS

CVE-2017-7064

CVE-2017-7064 affects WebKit-based components across Apple and WebKitGTK+ ecosystems. The issue is a memory access/read restriction bypass in the WebKit component, exploitable via crafted web content. Affected products include iOS 10.3.x, Safari 10.x, and WebKitGTK+ shipped with GTK+ deployments ...

CVE-2017-7045

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-7064

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-rea...

CVE-2017-7045

CVE-2017-7045 is an Apple macOS/Sierra vulnerability affecting the Intel Graphics Driver. The issue, tracked in Apple’s security content for macOS Sierra 10.12.6 and related Security Update 2017-003, permits a crafted application to bypass memory-read restrictions and may enable access to restric...

CVE-2017-7028

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-7029

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-7064

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-rea...

Virtuozzo 7 : gstreamer-plugins-good / etc (VZLSA-2017-0019)

An update for gstreamer-plugins-good is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2017-1000381

The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way...

DEBIAN-CVE-2017-1000381

The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way...

ALPINE-CVE-2017-1000381

The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way...