CVE-2017-14315
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-14315
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio Protocol), a large audio command can be sent to a targeted device and lead to a heap overflow with attacker-controlled data. Since the audio commands sent via LEAP are not properly validated, an attacker can use this overflow to gain full control of the device through the relatively high privileges of the Bluetooth stack in iOS. The attack bypasses Bluetooth access control; however, the default "Bluetooth On" value must be present in Settings.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apple iOS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apple iOS是美国苹果（Apple）公司为移动设备所开发的一套操作系统。 Apple iOS 7版本至9版本中的LEAP (Low Energy Audio Protocol)实现过程存在安全漏洞，该漏洞源于程序没有正确的验证音频命令。攻击者可利用该漏洞控制设备。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2017-14315
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-14315
Please Login to view more intelligence information
- https://support.apple.com/kb/HT210121x_refsource_CONFIRM
- https://www.armis.com/bluebornex_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2017-14315
Same Patch Batch · n/a · 2017-09-12 · 36 CVEs total
| CVE-2015-9228 | WordPress Photocrati NextGEN Gallery插件代码问题漏洞 | |
| CVE-2017-14337 | MISP 安全漏洞 | |
| CVE-2017-14316 | Xen 安全漏洞 | |
| CVE-2017-14317 | Xen 安全漏洞 | |
| CVE-2017-14318 | Xen 安全漏洞 | |
| CVE-2017-14319 | Xen 安全漏洞 | |
| CVE-2014-9624 | MantisBT 安全漏洞 | |
| CVE-2014-9634 | Apache Tomcat CloudBees Jenkins 安全漏洞 | |
| CVE-2014-9635 | CloudBees Jenkins 安全漏洞 | |
| CVE-2017-14343 | ImageMagick 安全漏洞 | |
| CVE-2017-14266 | Tcpreplay 缓冲区错误漏洞 | |
| CVE-2017-14324 | ImageMagick 安全漏洞 | |
| CVE-2017-14325 | ImageMagick 安全漏洞 | |
| CVE-2017-14326 | ImageMagick 安全漏洞 | |
| CVE-2017-14333 | GNU Binutils 安全漏洞 | |
| CVE-2017-14335 | Beijing Hanbang Hanbanggaoke IP Camera 安全漏洞 | |
| CVE-2017-14313 | WordPress Shibboleth插件跨站脚本漏洞 | |
| CVE-2017-14314 | GraphicsMagick 安全漏洞 | |
| CVE-2017-14344 | Jungo WinDriver 安全漏洞 | |
| CVE-2015-9230 | WordPress BulletProof Security插件跨站脚本漏洞 |
Showing top 20 of 36 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service - CVE-2026-8267
Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of s - CVE-2026-8266
Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_ - CVE-2026-8261
Squirrel sqobject.cpp Load heap-based overflow - CVE-2026-8258
Squirrel sqstdstring.cpp validate_format stack-based overflo
V. Comments for CVE-2017-14315
No comments yet