CVE-2017-13782
—CVSS 3.0
5.5 medium
EPSS
1%p64
Published
()
Modified
Description
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a /dev/dtracehelper attack involving the dtrace_dif_variable and dtrace_getarg functions.
- Vendors
- apple
- Products
- mac os x
- Weakness
- CWE-200
- Vector
- CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.