Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2017-13908

UNKNOWN
Published 2021-12-23T19:48:30
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2017-13908. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

An issue in handling file permissions was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A local attacker may be able to execute non-executable text files via an SMB share.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Apple

macOS

Affected Versions:

unspecified
Apple

macOS

Affected Versions:

unspecified

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-vgxp-gf4h-v2jw

Advisory Details

An issue in handling file permissions was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A local attacker may be able to execute non-executable text files via an SMB share.

CVSS Scoring

CVSS Score

7.5

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2017-13908
WEB https://support.apple.com/en-us/HT208144
WEB https://support.apple.com/en-us/HT208221

Advisory provided by GitHub Security Advisory Database. Published: December 24, 2021, Modified: January 5, 2022

References

https://support.apple.com/en-us/HT208221
https://support.apple.com/en-us/HT208144
Published: 2021-12-23T19:48:30
Last Modified: 2024-08-05T19:13:41.641Z
Copied to clipboard!