Test ID:	1.3.6.1.4.1.25623.1.0.817133
Category:	Mac OS X Local Security Checks
Title:	Apple Mac OS X Security Update (HT211170)-04
Summary:	Apple Mac OS X is prone to multiple vulnerabilities.
Description:	Summary: Apple Mac OS X is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - An error in permissions issued. - An out-of-bounds write error. - A memory initialization error. - Multiple out-of-bounds read errors. - Multiple memory corruption issues. - An error in state management. - An integer overflow. - An authorization issue. - An error in input validation. - Presence of vulnerable code. - A race condition. - An error in the handling of environment variables. - A logic error resulting in memory corruption. - A use after free error. Vulnerability Impact: Successful exploitation will allow remote attackers gain root privileges, conduct a denial-of-service, execute arbitrary code, read kernel memory, elevate privileges, escape sandbox and gain access to sensitive information. Affected Software/OS: Apple Mac OS X versions 10.13.x through 10.13.6, 10.14.x through 10.14.6 and 10.15.x through 10.15.4 Solution: Apply security update 2020-003 for Apple Mac OS X version 10.13.x and 10.14.x, or upgrade to version 10.15.5 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-9817 Cisco Security Advisory: 20210505 MacOS Local Privilege Escalation Exploitable through Cisco AnyConnect Secure Mobility Client https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-mac-priv-esc-VqST2nrT https://support.apple.com/HT211170 Common Vulnerability Exposure (CVE) ID: CVE-2020-9816 https://support.apple.com/HT211168 https://support.apple.com/HT211171 https://support.apple.com/HT211175 Common Vulnerability Exposure (CVE) ID: CVE-2020-9830 Common Vulnerability Exposure (CVE) ID: CVE-2020-9833 Common Vulnerability Exposure (CVE) ID: CVE-2020-9832 Common Vulnerability Exposure (CVE) ID: CVE-2020-9834 Common Vulnerability Exposure (CVE) ID: CVE-2020-9811 Common Vulnerability Exposure (CVE) ID: CVE-2020-9812 Common Vulnerability Exposure (CVE) ID: CVE-2020-9841 Common Vulnerability Exposure (CVE) ID: CVE-2020-9789 https://support.apple.com/HT211178 https://support.apple.com/HT211179 https://support.apple.com/HT211181 Common Vulnerability Exposure (CVE) ID: CVE-2020-9790 Common Vulnerability Exposure (CVE) ID: CVE-2019-20044 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FP64FFIZI2CKQOEAOI5A72PVQULE7ZZC/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PN5V7MPHRRP7QNHOEK56S7QGRU53WUN6/ http://seclists.org/fulldisclosure/2020/May/49 http://seclists.org/fulldisclosure/2020/May/53 http://seclists.org/fulldisclosure/2020/May/59 http://seclists.org/fulldisclosure/2020/May/55 https://security.gentoo.org/glsa/202003-55 http://zsh.sourceforge.net/releases.html https://github.com/XMB5/zsh-privileged-upgrade https://www.zsh.org/mla/zsh-announce/141 https://lists.debian.org/debian-lts-announce/2020/03/msg00004.html https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html Common Vulnerability Exposure (CVE) ID: CVE-2020-9808 Common Vulnerability Exposure (CVE) ID: CVE-2020-9809 Common Vulnerability Exposure (CVE) ID: CVE-2020-9847 Common Vulnerability Exposure (CVE) ID: CVE-2020-9822 Common Vulnerability Exposure (CVE) ID: CVE-2020-9821 Common Vulnerability Exposure (CVE) ID: CVE-2020-9826 Common Vulnerability Exposure (CVE) ID: CVE-2020-9797 Common Vulnerability Exposure (CVE) ID: CVE-2020-9839 Common Vulnerability Exposure (CVE) ID: CVE-2019-14868 20200529 APPLE-SA-2020-05-26-3 macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierra [debian-lts-announce] 20200720 [SECURITY] [DLA 2284-1] ksh security update https://lists.debian.org/debian-lts-announce/2020/07/msg00015.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14868 https://github.com/att/ast/commit/c7de8b641266bac7c77942239ac659edfee9ecd2 https://support.apple.com/kb/HT211170 Common Vulnerability Exposure (CVE) ID: CVE-2020-9813 Common Vulnerability Exposure (CVE) ID: CVE-2020-9814 Common Vulnerability Exposure (CVE) ID: CVE-2020-9795
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.