About the security content of macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2017-9050libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c
• CVE-2017-9049libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c
• CVE-2017-7376Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects
• CVE-2017-1000101The URL is stored in a heap based buffer, so it could then be made to wrongly read something else instead of crashing
• CVE-2017-1000100n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2017-13037The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts()
• CVE-2017-13027The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print()
• CVE-2017-12997The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print()
• CVE-2017-12996The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print()
• CVE-2017-12995The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print()
• CVE-2017-12994The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print()
• CVE-2017-12993The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions
• CVE-2017-12992The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print()
• CVE-2017-12990The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions
• CVE-2017-12985The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print()
• CVE-2017-12902The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions
• CVE-2017-12901The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print()
• CVE-2017-12899The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print()
• CVE-2017-12898The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply()
• CVE-2017-12897The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print()
• CVE-2017-12896The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print()
• CVE-2017-12895The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print()
• CVE-2017-12894Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring()
• CVE-2017-12893The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len()
• CVE-2017-13019The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print()
• CVE-2017-13017The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print()
• CVE-2017-13016The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print()
• CVE-2017-13015The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print()
• CVE-2017-13014The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions
• CVE-2017-13013The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions
• CVE-2017-13010The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart()
• CVE-2017-13006The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions
• CVE-2017-13002The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension()
• CVE-2017-13001The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh()
• CVE-2017-13000The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print()
• CVE-2017-13020The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print()
• CVE-2017-13028The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print()
• CVE-2017-13025The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print()
• CVE-2017-13024The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print()
• CVE-2017-13022The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute()
• CVE-2017-13021The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print()
• CVE-2017-13035The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id()
• CVE-2017-13034The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print()
• CVE-2017-13031The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print()
• CVE-2017-13038The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp()
• CVE-2017-13040The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions
• CVE-2017-13041The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print()
• CVE-2017-13045The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print()
• CVE-2017-13047The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print()
• CVE-2017-13048The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print()

Source and provenance

Original title: About the security content of macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan - Apple Support. Captured 17 Oct 2026, 02:04 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.