Test ID:	1.3.6.1.4.1.25623.1.0.813636
Category:	Mac OS X Local Security Checks
Title:	Apple Mac OS X Security Updates (HT208937)-03
Summary:	Apple Mac OS X is prone to multiple vulnerabilities.
Description:	Summary: Apple Mac OS X is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - Lazy FP state restore instead of eager save and restore of the state upon a context switch. Lazy restored states are potentially vulnerable to exploits where one process may infer register values of other processes through a speculative execution side channel that infers their value. - A memory corruption issue due to poor memory handling. Vulnerability Impact: Successful exploitation will allow attackers to disclose sensitive information and gain elevated privileges. Affected Software/OS: Apple Mac OS X versions 10.11.x through 10.11.6 build 15G21013, 10.12.x through 10.12.6 build 16G1408 and 10.13.x through 10.13.5 Solution: Upgrade to Apple Mac OS X 10.13.6 or later or apply the appropriate patch for 10.11.x and 10.12.x versions. Please see the references for more information. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-3665 BugTraq ID: 104460 http://www.securityfocus.com/bid/104460 https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 https://nvidia.custhelp.com/app/answers/detail/a_id/4787 https://security.netapp.com/advisory/ntap-20181016-0001/ https://security.paloaltonetworks.com/CVE-2018-3665 https://support.citrix.com/article/CTX235745 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html https://www.synology.com/support/security/Synology_SA_18_31 Debian Security Information: DSA-4232 (Google Search) https://www.debian.org/security/2018/dsa-4232 FreeBSD Security Advisory: FreeBSD-SA-18:07 https://security.FreeBSD.org/advisories/FreeBSD-SA-18:07.lazyfpu.asc https://www.oracle.com/security-alerts/cpujul2020.html https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html RedHat Security Advisories: RHSA-2018:1852 https://access.redhat.com/errata/RHSA-2018:1852 RedHat Security Advisories: RHSA-2018:1944 https://access.redhat.com/errata/RHSA-2018:1944 RedHat Security Advisories: RHSA-2018:2164 https://access.redhat.com/errata/RHSA-2018:2164 RedHat Security Advisories: RHSA-2018:2165 https://access.redhat.com/errata/RHSA-2018:2165 RedHat Security Advisories: RHSA-2019:1170 https://access.redhat.com/errata/RHSA-2019:1170 RedHat Security Advisories: RHSA-2019:1190 https://access.redhat.com/errata/RHSA-2019:1190 http://www.securitytracker.com/id/1041124 http://www.securitytracker.com/id/1041125 https://usn.ubuntu.com/3696-1/ https://usn.ubuntu.com/3696-2/ https://usn.ubuntu.com/3698-1/ https://usn.ubuntu.com/3698-2/ Common Vulnerability Exposure (CVE) ID: CVE-2018-4280 https://support.apple.com/kb/HT208935 https://support.apple.com/kb/HT208936 https://support.apple.com/kb/HT208937 https://support.apple.com/kb/HT208938
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.