CVE-2017-13887

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In macOS High Sierra before 10.13.2, a logic issue existed in APFS when deleting keys during hibernation. This was addressed with improved state management.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-320

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://support.apple.com/HT208331Vendor Advisory
https://support.apple.com/HT208331Vendor Advisory

Timeline

Published: Jan 11, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-138887.5In iOS before 11.2, a type confusion issue was addressed with improved memory handling.CVE-2017-138899.8In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic error existed in the CVE-2017-138907.4An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. macOS before 10.13 is affected. The issue involves the CVE-2017-138916.5In iOS before 11.2, an inconsistent user interface issue was addressed through improved state management.CVE-2017-138927.5An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixe CVE-2017-139037.5An issue was discovered in certain Apple products. iOS before 11.2.1 is affected. tvOS before 11.2.1 is affected. The issue involves the "Ho CVE-2017-139047.8An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affect CVE-2017-139058.1A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security U CVE-2017-139067.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 201 CVE-2017-139076.8A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 201 CVE-2017-139087.8An issue in handling file permissions was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13.1, Security Upd CVE-2017-139095.5An issue existed in the storage of sensitive tokens. This issue was addressed by placing the tokens in Keychain. This issue is fixed in macO