Published: 25/12/2017 Updated: 22/03/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

An issue exists in certain Apple products. iOS prior to 11.2 is affected. macOS prior to 10.13.2 is affected. tvOS prior to 11.2 is affected. watchOS prior to 4.2 is affected. The issue involves the "Kernel" component. It allows malicious users to bypass intended memory-read restrictions via a crafted app.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple tvos
apple iphone os
apple mac os x
apple watchos

/* * ctl_ctloutput-leakc * Brandon Azad * * CVE-2017-13868 * * While looking through the source code of XNU version 4570146, I noticed that the function * ctl_ctloutput() in the file bsd/kern/kern_controlc does not check the return value of * sooptcopyin(), which makes it possible to leak the uninitialized contents of a kernel heap * a ...

CVE-2017-13868: Information leak of uninitialized kernel heap data in XNU.

ctl_ctloutput-leak The ctl_ctloutput function in macOS High Sierra 1013 ignores the return value of a call to sooptcopyin, which opens up a race window to leak uninitialized kernel heap data to user space ctl_ctloutput-leak is a proof-of-concept exploit that attempts to trigger this information leak Exploitation requires root privileges This exploit has been confirmed to w

CWE-200 https://support.apple.com/HT208334 https://support.apple.com/HT208331 https://support.apple.com/HT208327 https://support.apple.com/HT208325 http://www.securitytracker.com/id/1039966 http://www.securitytracker.com/id/1039953 http://www.securitytracker.com/id/1039952 http://www.securityfocus.com/bid/102100 https://github.com/bazad/ctl_ctloutput-leak https://bazad.github.io/2018/03/a-fun-xnu-infoleak/https://nvd.nist.gov https://github.com/bazad/ctl_ctloutput-leak https://www.exploit-db.com/exploits/44234/

CVE-2017-13868

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect