High Threat Security Alert (A23-12-08): Multiple Vulnerabilities in Apple iOS and iPadOS


 

Published on: 12 December 2023

  
  

Description:

Apple has released iOS 16.7.3, iOS 17.2, iPadOS 16.7.3 and iPadOS 17.2 to fix the vulnerabilities in various Apple devices. The list of vulnerability information can be found at:
https://support.apple.com/en-us/HT214034
https://support.apple.com/en-us/HT214035

Reports indicate that multiple vulnerabilities (CVE-2023-42916 and CVE-2023-42917) are being actively exploited. Users are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

 

Affected Systems:

  • iPhone 8 and later
  • iPad 5th generation and later, Air 3rd generation and later, mini 5th generation and later, iPad Pro (all models)

 

Impact:

Depending on the vulnerabilities being exploited, a successful exploitation could lead to arbitrary code execution, denial of service, information disclosure, security restriction bypass or spoofing on an affected device.

 

Recommendation:

Apple has released new version of iOS and iPadOS to address the issue.

The updates can be obtained through the auto-update mechanism. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

 

More Information:

  • https://support.apple.com/en-us/HT214034
  • https://support.apple.com/en-us/HT214035
  • https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20231212
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42883 (to CVE-2023-42884)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42890
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42897 (to CVE-2023-42899)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42914
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42916 (to CVE-2023-42917)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42919
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42922 (to CVE-2023-42923)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42927
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45866


Tag: Apple , iOS , iPhone , iPad , iPadOS
Tags