Apple iOS APPLE-SA-2017-05-15-2 Security Bypass and Denial of Service Vulnerabilities

Bugtraq ID:	98479
Class:	Design Error
CVE:	CVE-2017-6982 CVE-2017-2498
Remote:	Yes
Local:	No
Published:	May 15 2017 12:00AM
Updated:	May 23 2017 04:27PM
Credit:	Vincent Desmurs (vincedes3), Sem Voigtlander (OxFEEDFACE), Joseph Shenton of CoffeeBreakers and Andrew Jerman
Vulnerable:	Apple iPhone 5 0 Apple iPad 0 Apple iOS 5 0 Apple iOS 4 0 Apple iOS 3 0 Apple iOS 10.2.1 Apple iOS 10.0.1 Apple iOS 9.3.4 Apple iOS 9.3.3 Apple iOS 9.3.2 Apple iOS 9.3.1 Apple iOS 9.2.1 Apple iOS 9.0.2 Apple iOS 9.0.1 Apple iOS 8.4.1 Apple iOS 7.2 Apple iOS 7.0.6 Apple iOS 7.0.5 Apple iOS 7.0.3 Apple iOS 7.0.2 Apple iOS 7.0.1 Apple iOS 6.3.1 Apple iOS 6.1.6 Apple iOS 6.1.4 Apple iOS 6.1.3 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 9.3.5 Apple iOS 9.3 Apple iOS 9.2 Apple iOS 9.1 Apple iOS 9 Apple iOS 8.4 Apple iOS 8.3 Apple iOS 8.2 Apple iOS 8.1.3 Apple iOS 8.1.2 Apple iOS 8.1.1 Apple iOS 8.1 Apple iOS 8 Apple iOS 7.1.2 Apple iOS 7.1.1 Apple iOS 7.1 Apple iOS 7.0.4 Apple iOS 7 Apple iOS 6.1 Apple iOS 6.0.2 Apple iOS 6.0.1 Apple iOS 6 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 Apple iOS 10.3.1 Apple iOS 10.3 Apple iOS 10.2 Apple iOS 10.1 Apple iOS 10
Not Vulnerable:	Apple iOS 10.3.2

Apple iOS APPLE-SA-2017-05-15-2 Security Bypass and Denial of Service Vulnerabilities

Apple iOS is prone to security-bypass and denial-of-service vulnerabilities.

Attackers can exploit these issues to perform man-in-the-middle attacks and impersonate trusted servers or cause denial-of-service conditions.

This issue is fixed in:
Apple iOS 10.3.2

Apple iOS APPLE-SA-2017-05-15-2 Security Bypass and Denial of Service Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple iOS APPLE-SA-2017-05-15-2 Security Bypass and Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Apple iOS APPLE-SA-2017-05-15-2 Security Bypass and Denial of Service Vulnerabilities

References:

• Apple Home Page (Apple)