20190513 APPLE-SA-2019-5-13-6 Apple TV Software 7.3

97328

1038172

https://googleprojectzero.blogspot.com/2017/04/over-air-exploiting-broadcoms-wi-fi_4.html

20190514 APPLE-SA-2019-5-13-6 Apple TV Software 7.3

https://support.apple.com/HT207688

https://support.apple.com/kb/HT210121

https://twitter.com/4Dgifts/status/849268365457850370

The version of iOS running on the mobile device is prior to 10.3.1, and is affected by an overflow condition that exists in the Wi-Fi HardMAC SoCs. The issue is triggered as input is not properly validated when handling FT-IEs in 802.11r Fast BSS Transition Authentication Responses. This may allow an proximate attacker to cause a stack-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code.

The version of Apple iOS running on the mobile device is prior to 10.3.1. It is, therefore, affected by a remote code execution vulnerability in the Wi-Fi component due to improper validation of unspecified input. An unauthenticated, remote attacker within Wi-Fi range can exploit this to cause a stack-based buffer overflow, resulting in a denial of service condition or potentially allowing the execution of arbitrary code.

ID	Name	Product	Family	Severity
700115	Apple iOS < 10.3.1 RCE	Nessus Network Monitor	Mobile Devices	high
99185	Apple iOS < 10.3.1 Wi-Fi Stack Buffer Overflow RCE	Nessus	Mobile Devices	medium

CVE-2017-6975

medium

Tenable Plugins

high

medium