CVE-2017-2428 An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves nghtt...
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves nghttp2 before 1.17.0 in the "HTTPProtocol" component. It allows remote HTTP/2 servers to have an unspecified impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphone os | <= 10.2.1 | No fix listed |
| apple mac os x | <= 10.12.3 | No fix listed |
| apple tvOS | <= 10.1.1 | No fix listed |
| apple watchOS | <= 3.1.3 | No fix listed |
References
- 97146 third-party-advisory vdb-entry
- 1038138 vdb-entry
- github.com third-party-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory