| Description: | Summary:
Apple Mac OS X is prone to multiple vulnerabilities.
Vulnerability Insight:
Multiple flaws exist due to:
- an error in Bluetooth HCI interface
- an error in IOAcceleratorFamily
- an error in Disk Images component
- the System Integrity Protection feature mishandles union mounts
- the Keychain Access improperly interacts with Keychain Agent
- the Kext tools mishandles kernel-extension loading
- an error in ASN.1 decode, kernel loader in EF, IOThunderboltFamily, in File
Bookmark component
- multiple errors in Intel Graphics Driver component
- use-after-free error in Hypervisor
- a privilege issue existed in handling union mounts
- multiple vulnerabilities existed in LibreSSL
- an input validation issue existed in OpenLDAP
- an issue existed in how Keychain Access interacted with Keychain Agent
Please see the references for more information on the vulnerabilities.
Vulnerability Impact:
Successful exploitation will allow attacker
to obtain sensitive information, execute arbitrary code, gain privileges,
cause a denial of service, to spoof, to bypass protection mechanism.
Affected Software/OS:
Apple Mac OS X versions 10.11 to 10.11.1,
10.9.x through 10.9.5 and 10.10.x through 10.10.5.
Solution:
Upgrade to Apple Mac OS X version
10.11.2 or later or apply security update 2015-005 for 10.10.x and security
update 2015-008 for 10.9.x. Please see the references for more information.
CVSS Score:
10.0
CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
