CVE-2017-2428

Critical

Published: 02/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in certain Apple products related to the 'HTTPProtocol' component. Affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue involves nghttp2 before 1.17.0.

Risk Assessment

Remote HTTP/2 servers may exploit this vulnerability, potentially leading to unspecified impacts on user systems. Organizations should be aware of the potential threats associated with this issue.

Recommendation

It is recommended to update systems to the latest versions to mitigate this vulnerability. Users should also monitor their systems for unauthorized access.

Original NVD description (English source)

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves nghttp2 before 1.17.0 in the "HTTPProtocol" component. It allows remote HTTP/2 servers to have an unspecified impact via unknown vectors.