阿里云漏洞库

CVE编号

CVE-2023-42917

利用情况

暂无

补丁情况

官方补丁

披露时间

2023-12-01

iOS 17.1.2 和 iPadOS 17.1.2，macOS Sonoma 14.1.2，Safari 17.1.2针对内存损坏漏洞进行了修复并改进了锁定处理。处理网络内容时可能导致任意代码执行。苹果公司已经注意到有关此问题可能已被利用至iOS 16.7.1之前的版本的报告。

"将组件 safari 升级至 17.1.2 及以上版本"
"将组件 ipados 升级至 17.1.2 及以上版本"
"将组件 iphone_os 升级至 17.1.2 及以上版本"
"将组件 macos 升级至 14.1.2 及以上版本"

参考链接
http://seclists.org/fulldisclosure/2023/Dec/12
http://seclists.org/fulldisclosure/2023/Dec/13
http://seclists.org/fulldisclosure/2023/Dec/3
http://seclists.org/fulldisclosure/2023/Dec/4
http://seclists.org/fulldisclosure/2023/Dec/5
http://seclists.org/fulldisclosure/2023/Dec/8
http://seclists.org/fulldisclosure/2024/Jan/35
http://www.openwall.com/lists/oss-security/2023/12/05/1
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedorapr...
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedorapr...
https://security.gentoo.org/glsa/202401-04
https://support.apple.com/en-us/HT214031
https://support.apple.com/en-us/HT214032
https://support.apple.com/en-us/HT214033
https://support.apple.com/kb/HT214033
https://support.apple.com/kb/HT214034
https://support.apple.com/kb/HT214062
https://www.debian.org/security/2023/dsa-5575

CWE-ID	漏洞类型
CWE-787	跨界内存写