In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio Protocol), a large audio command can be sent to a targeted device and lead to a heap overflow with attacker-controlled data. Since the audio commands sent via LEAP are not properly validated, an attacker can use this overflow to gain full control of the device through the relatively high privileges of the Bluetooth stack in iOS. The attack bypasses Bluetooth access control; however, the default "Bluetooth On" value must be present in Settings.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2019/May/24 | |
| http://www.securityfocus.com/bid/100816 | Third Party Advisory VDB Entry |
| https://seclists.org/bugtraq/2019/May/30 | |
| https://support.apple.com/kb/HT210121 | |
| https://www.armis.com/blueborne | Technical Description Third Party Advisory |
| http://seclists.org/fulldisclosure/2019/May/24 | |
| http://www.securityfocus.com/bid/100816 | Third Party Advisory VDB Entry |
| https://seclists.org/bugtraq/2019/May/30 | |
| https://support.apple.com/kb/HT210121 | |
| https://www.armis.com/blueborne | Technical Description Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:12
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://seclists.org/fulldisclosure/2019/May/24 - | |
| References | () http://www.securityfocus.com/bid/100816 - Third Party Advisory, VDB Entry | |
| References | () https://seclists.org/bugtraq/2019/May/30 - | |
| References | () https://support.apple.com/kb/HT210121 - | |
| References | () https://www.armis.com/blueborne - Technical Description, Third Party Advisory |
Information
Published : 2017-09-12 15:29
Updated : 2024-11-21 03:12
NVD link : CVE-2017-14315
Mitre link : CVE-2017-14315
CVE.ORG link : CVE-2017-14315
JSON object : View
Products Affected
apple
- iphone_os
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer