Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.817133
Categoría:Mac OS X Local Security Checks
Título:Apple Mac OS X Security Update (HT211170)-04
Resumen:Apple Mac OS X is prone to multiple vulnerabilities.
Descripción:Summary:
Apple Mac OS X is prone to multiple vulnerabilities.

Vulnerability Insight:
Multiple flaws exist due to:

- An error in permissions issued.

- An out-of-bounds write error.

- A memory initialization error.

- Multiple out-of-bounds read errors.

- Multiple memory corruption issues.

- An error in state management.

- An integer overflow.

- An authorization issue.

- An error in input validation.

- Presence of vulnerable code.

- A race condition.

- An error in the handling of environment variables.

- A logic error resulting in memory corruption.

- A use after free error.

Vulnerability Impact:
Successful exploitation will allow remote
attackers gain root privileges, conduct a denial-of-service, execute arbitrary
code, read kernel memory, elevate privileges, escape sandbox and gain access to
sensitive information.

Affected Software/OS:
Apple Mac OS X versions 10.13.x through
10.13.6, 10.14.x through 10.14.6 and 10.15.x through 10.15.4

Solution:
Apply security update 2020-003 for Apple
Mac OS X version 10.13.x and 10.14.x, or upgrade to version 10.15.5 or later.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2020-9817
Cisco Security Advisory: 20210505 MacOS Local Privilege Escalation Exploitable through Cisco AnyConnect Secure Mobility Client
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-mac-priv-esc-VqST2nrT
https://support.apple.com/HT211170
Common Vulnerability Exposure (CVE) ID: CVE-2020-9816
https://support.apple.com/HT211168
https://support.apple.com/HT211171
https://support.apple.com/HT211175
Common Vulnerability Exposure (CVE) ID: CVE-2020-9830
Common Vulnerability Exposure (CVE) ID: CVE-2020-9833
Common Vulnerability Exposure (CVE) ID: CVE-2020-9832
Common Vulnerability Exposure (CVE) ID: CVE-2020-9834
Common Vulnerability Exposure (CVE) ID: CVE-2020-9811
Common Vulnerability Exposure (CVE) ID: CVE-2020-9812
Common Vulnerability Exposure (CVE) ID: CVE-2020-9841
Common Vulnerability Exposure (CVE) ID: CVE-2020-9789
https://support.apple.com/HT211178
https://support.apple.com/HT211179
https://support.apple.com/HT211181
Common Vulnerability Exposure (CVE) ID: CVE-2020-9790
Common Vulnerability Exposure (CVE) ID: CVE-2019-20044
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FP64FFIZI2CKQOEAOI5A72PVQULE7ZZC/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PN5V7MPHRRP7QNHOEK56S7QGRU53WUN6/
http://seclists.org/fulldisclosure/2020/May/49
http://seclists.org/fulldisclosure/2020/May/53
http://seclists.org/fulldisclosure/2020/May/59
http://seclists.org/fulldisclosure/2020/May/55
https://security.gentoo.org/glsa/202003-55
http://zsh.sourceforge.net/releases.html
https://github.com/XMB5/zsh-privileged-upgrade
https://www.zsh.org/mla/zsh-announce/141
https://lists.debian.org/debian-lts-announce/2020/03/msg00004.html
https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html
Common Vulnerability Exposure (CVE) ID: CVE-2020-9808
Common Vulnerability Exposure (CVE) ID: CVE-2020-9809
Common Vulnerability Exposure (CVE) ID: CVE-2020-9847
Common Vulnerability Exposure (CVE) ID: CVE-2020-9822
Common Vulnerability Exposure (CVE) ID: CVE-2020-9821
Common Vulnerability Exposure (CVE) ID: CVE-2020-9826
Common Vulnerability Exposure (CVE) ID: CVE-2020-9797
Common Vulnerability Exposure (CVE) ID: CVE-2020-9839
Common Vulnerability Exposure (CVE) ID: CVE-2019-14868
20200529 APPLE-SA-2020-05-26-3 macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierra
[debian-lts-announce] 20200720 [SECURITY] [DLA 2284-1] ksh security update
https://lists.debian.org/debian-lts-announce/2020/07/msg00015.html
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14868
https://github.com/att/ast/commit/c7de8b641266bac7c77942239ac659edfee9ecd2
https://support.apple.com/kb/HT211170
Common Vulnerability Exposure (CVE) ID: CVE-2020-9813
Common Vulnerability Exposure (CVE) ID: CVE-2020-9814
Common Vulnerability Exposure (CVE) ID: CVE-2020-9795
CopyrightCopyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.