CVE-2017-14315
Summary
| CVE | CVE-2017-14315 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-09-12 15:29:00 UTC |
| Updated | 2019-05-14 16:29:00 UTC |
| Description | In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio Protocol), a large audio command can be sent to a targeted device and lead to a heap overflow with attacker-controlled data. Since the audio commands sent via LEAP are not properly validated, an attacker can use this overflow to gain full control of the device through the relatively high privileges of the Bluetooth stack in iOS. The attack bypasses Bluetooth access control; however, the default "Bluetooth On" value must be present in Settings. |
Risk And Classification
Problem Types: CWE-119
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Apple | Iphone Os | 7.0 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.2 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.3 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.4 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.5 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.6 | All | All | All |
| Operating System | Apple | Iphone Os | 7.1 | All | All | All |
| Operating System | Apple | Iphone Os | 7.1.1 | All | All | All |
| Operating System | Apple | Iphone Os | 7.1.2 | All | All | All |
| Operating System | Apple | Iphone Os | 8.0 | All | All | All |
| Operating System | Apple | Iphone Os | 8.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 8.0.2 | All | All | All |
| Operating System | Apple | Iphone Os | 8.1 | All | All | All |
| Operating System | Apple | Iphone Os | 8.1.2 | All | All | All |
| Operating System | Apple | Iphone Os | 8.1.3 | All | All | All |
| Operating System | Apple | Iphone Os | 8.2 | All | All | All |
| Operating System | Apple | Iphone Os | 8.4.1 | All | All | All |
| Operating System | Apple | Iphone Os | 9.0 | All | All | All |
| Operating System | Apple | Iphone Os | 9.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 9.0.2 | All | All | All |
| Operating System | Apple | Iphone Os | 9.1 | All | All | All |
| Operating System | Apple | Iphone Os | 9.2 | All | All | All |
| Operating System | Apple | Iphone Os | 9.2.1 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3.1 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3.2 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3.3 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3.4 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3.5 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.2 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.3 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.4 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.5 | All | All | All |
| Operating System | Apple | Iphone Os | 7.0.6 | All | All | All |
| Operating System | Apple | Iphone Os | 7.1 | All | All | All |
| Operating System | Apple | Iphone Os | 7.1.1 | All | All | All |
| Operating System | Apple | Iphone Os | 7.1.2 | All | All | All |
| Operating System | Apple | Iphone Os | 8.0 | All | All | All |
| Operating System | Apple | Iphone Os | 8.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 8.0.2 | All | All | All |
| Operating System | Apple | Iphone Os | 8.1 | All | All | All |
| Operating System | Apple | Iphone Os | 8.1.2 | All | All | All |
| Operating System | Apple | Iphone Os | 8.1.3 | All | All | All |
| Operating System | Apple | Iphone Os | 8.2 | All | All | All |
| Operating System | Apple | Iphone Os | 8.4.1 | All | All | All |
| Operating System | Apple | Iphone Os | 9.0 | All | All | All |
| Operating System | Apple | Iphone Os | 9.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 9.0.2 | All | All | All |
| Operating System | Apple | Iphone Os | 9.1 | All | All | All |
| Operating System | Apple | Iphone Os | 9.2 | All | All | All |
| Operating System | Apple | Iphone Os | 9.2.1 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3.1 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3.2 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3.3 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3.4 | All | All | All |
| Operating System | Apple | Iphone Os | 9.3.5 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Apple iOS and tvOS CVE-2017-14315 Heap Based Buffer Overflow Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| BlueBorne Information from the Research Team - Armis Labs | MISC | www.armis.com | Technical Description, Third Party Advisory |
| About the security content of Apple TV Software 7.3 - Apple Support | CONFIRM | support.apple.com | |
| Full Disclosure: APPLE-SA-2019-5-13-6 Apple TV Software 7.3 | FULLDISC | seclists.org | |
| Bugtraq: APPLE-SA-2019-5-13-6 Apple TV Software 7.3 | BUGTRAQ | seclists.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.