Test Kennung:	1.3.6.1.4.1.25623.1.0.810982
Kategorie:	Mac OS X Local Security Checks
Titel:	Apple Mac OS X Information Disclosure Vulnerability (HT207615)
Zusammenfassung:	Apple Mac OS X is prone to an information disclosure vulnerability.
Beschreibung:	Summary: Apple Mac OS X is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to an error in time computation. Vulnerability Impact: Successful exploitation will allow local attacker to leak sensitive user information. Affected Software/OS: Apple Mac OS X version 10.11.x through 10.11.6 and 10.12.x through 10.12.3 Solution: For Apple Mac OS X version 10.12.x through 10.12.3 upgrade to 10.12.4 and for versions 10.11.x through 10.11.6 apply the appropriate security patch. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7056 1037575 http://www.securitytracker.com/id/1037575 95375 http://www.securityfocus.com/bid/95375 DSA-3773 https://www.debian.org/security/2017/dsa-3773 RHSA-2017:1413 https://access.redhat.com/errata/RHSA-2017:1413 RHSA-2017:1414 https://access.redhat.com/errata/RHSA-2017:1414 RHSA-2017:1415 http://rhn.redhat.com/errata/RHSA-2017-1415.html RHSA-2017:1801 https://access.redhat.com/errata/RHSA-2017:1801 RHSA-2017:1802 https://access.redhat.com/errata/RHSA-2017:1802 [oss-security] 20170110 CVE-2016-7056 ECDSA P-256 timing attack key recovery (OpenSSL, LibreSSL, BoringSSL) https://seclists.org/oss-sec/2017/q1/52 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7056 https://eprint.iacr.org/2016/1195 https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/033_libcrypto.patch.sig https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/016_libcrypto.patch.sig https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=8aed2a7548362e88e84a7feb795a3a97e8395008 https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-7056.html https://security-tracker.debian.org/tracker/CVE-2016-7056
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.