CVE-2017-13876: Buffer Overflow
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Other sources
Kernel. A memory corruption issue was addressed with improved memory handling.
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-7164
- CVE-2017-13905
- CVE-2017-7172
- CVE-2017-7171
- CVE-2017-7151
- CVE-2017-7162
- CVE-2017-13861
- CVE-2017-13904
- CVE-2017-5754
- CVE-2017-13862
- CVE-2017-13867
- CVE-2017-13876
- CVE-2017-7173
- CVE-2017-13855
- CVE-2017-13865
- CVE-2017-13868
- CVE-2017-13869
- CVE-2017-7154
- CVE-2017-13885
- CVE-2017-7165
- CVE-2017-13884
- CVE-2017-7153
- CVE-2017-7156
- CVE-2017-7157
- CVE-2017-13856
- CVE-2017-13870
- CVE-2017-7160
- CVE-2017-13866
- CVE-2017-13080
- CVE-2017-13887
- CVE-2017-9798
- CVE-2017-13892
- CVE-2017-1000254
- CVE-2017-13872
- CVE-2017-15422
- CVE-2017-13883
- CVE-2017-7163
- CVE-2017-7155
- CVE-2017-13878
- CVE-2017-13875
- CVE-2017-7159
- CVE-2017-13848
- CVE-2017-13858
- CVE-2017-13847
- CVE-2017-13871
- CVE-2017-13860
- CVE-2017-3735
- CVE-2017-12837
- CVE-2017-7158
- CVE-2017-13911
- CVE-2017-13886
- CVE-2017-13880
- CVE-2017-2411
- CVE-2017-13879
- CVE-2017-13874
- CVE-2017-7152
- CVE-2017-13888
- CVE-2017-13891
Frequently Asked Questions
What is CVE-2017-13876?
CVE-2017-13876 is a memory corruption issue in the Kernel component of certain Apple products.
Which Apple products are affected by CVE-2017-13876?
iOS before version 11.2, macOS before version 10.13.2, tvOS before version 11.2, and watchOS before version 4.2 are affected.
What is the severity of CVE-2017-13876?
CVE-2017-13876 has a severity rating of 7.8 (Critical).
How can CVE-2017-13876 be exploited?
CVE-2017-13876 allows attackers to execute arbitrary code in a privileged context or cause a denial of service.
Are there any references for CVE-2017-13876?
Yes, you can find more information about CVE-2017-13876 at the following references: [^1^] [^2^] [^3^]