CVE-2023-42917

HIGHCISA KEV

8.8

Description

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

Details CVE

Score CVSS v3.18.8

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie11/30/2023

Derniere modification10/23/2025

Sourcekev

Observations honeypot0

CISA KEV

FournisseurApple

ProduitMultiple Products

Nom vulnerabiliteApple Multiple Products WebKit Memory Corruption Vulnerability

Date ajout KEV2023-12-04

Date limite remediation2023-12-25

Utilise dans ransomwareUnknown

Produits affectes

apple:ipadosapple:iphone_osapple:macosapple:safaridebian:debian_linuxfedoraproject:fedorawebkitgtk:webkitgtk\+

Faiblesses (CWE)

CWE-787CWE-787

References

http://seclists.org/fulldisclosure/2023/Dec/12(product-security@apple.com)

http://seclists.org/fulldisclosure/2023/Dec/13(product-security@apple.com)

http://seclists.org/fulldisclosure/2023/Dec/3(product-security@apple.com)

http://seclists.org/fulldisclosure/2023/Dec/4(product-security@apple.com)

http://seclists.org/fulldisclosure/2023/Dec/5(product-security@apple.com)

http://seclists.org/fulldisclosure/2023/Dec/8(product-security@apple.com)

http://seclists.org/fulldisclosure/2024/Jan/35(product-security@apple.com)

http://www.openwall.com/lists/oss-security/2023/12/05/1(product-security@apple.com)

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/(product-security@apple.com)

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/(product-security@apple.com)

https://security.gentoo.org/glsa/202401-04(product-security@apple.com)

https://support.apple.com/en-us/HT214031(product-security@apple.com)

https://support.apple.com/en-us/HT214032(product-security@apple.com)

https://support.apple.com/en-us/HT214033(product-security@apple.com)

https://support.apple.com/kb/HT214033(product-security@apple.com)

https://support.apple.com/kb/HT214034(product-security@apple.com)

https://support.apple.com/kb/HT214062(product-security@apple.com)

https://www.debian.org/security/2023/dsa-5575(product-security@apple.com)

http://seclists.org/fulldisclosure/2023/Dec/12(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2023/Dec/13(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2023/Dec/3(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2023/Dec/4(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2023/Dec/5(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2023/Dec/8(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2024/Jan/35(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2023/12/05/1(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AD2KIHHCUBQC2YYH3FJWAHI5BG3QETOH/(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P5LQS6VEI7VIZNC7QGQ62EOV45R5RJIR/(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/202401-04(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT214031(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT214032(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT214033(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/kb/HT214033(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/kb/HT214034(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/kb/HT214062(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2023/dsa-5575(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42917(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.