full-disclosure - [FD] APPLE-SA-2019-5-13-6 Apple TV Software 7.3

Open Source and information security mailing list archives

Message-id: <DCFB2E43-2BCE-4774-9657-61A36A162F7C@lists.apple.com>
Date: Mon, 13 May 2019 14:15:16 -0400
From: Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2019-5-13-6 Apple TV Software 7.3

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2019-5-13-6 Apple TV Software 7.3

Apple TV Software 7.3 is now available and addresses the following:

Bluetooth
Available for: Apple TV (3rd generation)
Impact: A remote attacker may cause an unexpected application
termination or arbitrary code execution
Description: An input validation issue existed in Bluetooth. This
issue was addressed with improved input validation.
CVE-2017-14315: Ben Seri and Gregory Vishnepolsky of Armis

Wi-Fi
Available for: Apple TV (3rd generation)
Impact: An attacker within range may be able to execute arbitrary
code on the Wi-Fi chip
Description: A memory corruption issue was addressed with improved
memory handling.
CVE-2017-9417: Nitay Artenstein of Exodus Intelligence

Wi-Fi
Available for: Apple TV (3rd generation)
Impact: An attacker within range may be able to execute arbitrary
code on the Wi-Fi chip
Description: A stack buffer overflow was addressed through improved
input validation.
CVE-2017-6975: Gal Beniamini of Google Project Zero

Installation note:

Apple TV will periodically check for software updates. Alternatively,
you may manually check for software updates by selecting
"Settings -> System -> Software Update -> Update Software."

To check the current version of software, select
"Settings -> General -> About."

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
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=fOnF
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives