CVE-2017-7086

High

Published: 23/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An issue was discovered in certain Apple products affecting iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4. The issue involves the 'libc' component and allows remote attackers to cause a denial of service via a crafted string mishandled by the glob function.

Risk Assessment

Attackers can exploit this vulnerability to trigger a denial of service, potentially leading to significant resource consumption and disruption of services.

Recommendation

It is recommended to update systems to the latest versions to mitigate this vulnerability and to monitor systems for unusual resource usage.

Other vulnerabilities in libc

CVE-2016-1832High
The libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 contains a vulnerability that allows local users to gain elevated privileges or cause a denial of service (memory corruption) via unspecified vectors.

Original NVD description (English source)

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "libc" component. It allows remote attackers to cause a denial of service (resource consumption) via a crafted string that is mishandled by the glob function.