CVE-2017-7151 : A race condition was addressed with additional validation. This issue affected v

A race condition was addressed with additional validation. This issue affected versions prior to iOS 11.2, macOS High Sierra 10.13.2, tvOS 11.2, watchOS 4.2, iTunes 12.7.2 for Windows, macOS High Sierra 10.13.4.

Published 2019-04-03 18:29:01

Updated 2019-04-05 18:32:01

Source Apple Inc.

View at NVD, CVE.org

Products affected by CVE-2017-7151

Apple » Mac Os X
Versions before (<) 10.13.2
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X
Versions from including (>=) 10.13.3 and before (<) 10.13.4
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Matching versions
Apple » Itunes
Versions before (<) 12.7.2
cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Apple » Iphone Os
Versions before (<) 11.2
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Matching versions
Apple » Watchos
Versions before (<) 4.2
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Matching versions
Apple » Tvos
Versions before (<) 11.2
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2017-7151

EPSS FAQ

0.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 59 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-7151

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.1	MEDIUM	AV:N/AC:H/Au:N/C:P/I:P/A:P	4.9	6.4	NIST
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.0	HIGH	CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H	1.0	5.9	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2017-7151

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-7151

https://support.apple.com/kb/HT208327

About the security content of tvOS 11.2 - Apple Support
Vendor Advisory
https://support.apple.com/kb/HT208326

About the security content of iTunes 12.7.2 for Windows - Apple Support
Vendor Advisory
https://support.apple.com/kb/HT208334

About the security content of iOS 11.2 - Apple Support
Vendor Advisory
https://support.apple.com/kb/HT208692

About the security content of macOS High Sierra 10.13.4, Security Update 2018-002 Sierra, and Security Update 2018-002 El Capitan - Apple Support
Vendor Advisory

CVEs referencing this url
https://support.apple.com/kb/HT208325

About the security content of watchOS 4.2 - Apple Support
Vendor Advisory
https://support.apple.com/kb/HT208331

About the security content of macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan - Apple Support
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2017-7151

Products affected by CVE-2017-7151

Exploit prediction scoring system (EPSS) score for CVE-2017-7151

CVSS scores for CVE-2017-7151

CWE ids for CVE-2017-7151

References for CVE-2017-7151