CVE-2017-13905

Katalog CVE

CVSS 8.1 · High EPSS 0,91%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada apple iphone os, apple mac os x +3 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan, watchOS 4.2. An application may be able to gain elevated privileges.

Rincian

Terbit di NVD

23 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,91% peluang dieksploitasi; lebih tinggi dari 58,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/HT208325 advisory vendor
• https://support.apple.com/en-us/HT208327 advisory vendor
• https://support.apple.com/en-us/HT208331 advisory vendor
• https://support.apple.com/en-us/HT208334 advisory vendor