Test ID:	1.3.6.1.4.1.25623.1.0.805676
Category:	Mac OS X Local Security Checks
Title:	Apple Mac OS X Multiple Vulnerabilities-01 (Jul 2015)
Summary:	Apple Mac OS X is prone to multiple vulnerabilities.
Description:	Summary: Apple Mac OS X is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist. Please see the references for more details. Vulnerability Impact: Successful exploitation will allow attacker to obtain sensitive information, execute arbitrary code, bypass intended launch restrictions and access restrictions, cause a denial of service, write to arbitrary files, execute arbitrary code with system privilege. Affected Software/OS: Apple Mac OS X versions 10.10.x before 10.10.4, 10.8.x through 10.8.5, 10.9.x through 10.9.5. Solution: Upgrade to Apple Mac OS X version 10.10.4 or later or apply security update 2015-005 for 10.9.x and 10.8.x versions. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3720 http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html BugTraq ID: 75493 http://www.securityfocus.com/bid/75493 Common Vulnerability Exposure (CVE) ID: CVE-2015-3718 http://www.securitytracker.com/id/1032760 Common Vulnerability Exposure (CVE) ID: CVE-2015-3716 Common Vulnerability Exposure (CVE) ID: CVE-2015-3715 Common Vulnerability Exposure (CVE) ID: CVE-2015-3714 Common Vulnerability Exposure (CVE) ID: CVE-2015-3713 http://www.securitytracker.com/id/1032757 Common Vulnerability Exposure (CVE) ID: CVE-2015-3712 Common Vulnerability Exposure (CVE) ID: CVE-2015-3711 Common Vulnerability Exposure (CVE) ID: CVE-2015-3709 Common Vulnerability Exposure (CVE) ID: CVE-2015-3708 Common Vulnerability Exposure (CVE) ID: CVE-2015-3707 Common Vulnerability Exposure (CVE) ID: CVE-2015-3706 Common Vulnerability Exposure (CVE) ID: CVE-2015-3705 Common Vulnerability Exposure (CVE) ID: CVE-2015-3704 https://www.exploit-db.com/exploits/38138/ http://packetstormsecurity.com/files/133547/OS-X-Privilege-Escalation.html Common Vulnerability Exposure (CVE) ID: CVE-2015-3702 Common Vulnerability Exposure (CVE) ID: CVE-2015-3701 Common Vulnerability Exposure (CVE) ID: CVE-2015-3700 Common Vulnerability Exposure (CVE) ID: CVE-2015-3699 Common Vulnerability Exposure (CVE) ID: CVE-2015-3698 Common Vulnerability Exposure (CVE) ID: CVE-2015-3697 Common Vulnerability Exposure (CVE) ID: CVE-2015-3696 Common Vulnerability Exposure (CVE) ID: CVE-2015-3695 Common Vulnerability Exposure (CVE) ID: CVE-2015-3693 http://lists.apple.com/archives/security-announce/2015/Jun/msg00003.html BugTraq ID: 75495 http://www.securityfocus.com/bid/75495 http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html http://www.securitytracker.com/id/1032444 http://www.securitytracker.com/id/1032755 Common Vulnerability Exposure (CVE) ID: CVE-2015-3692 Common Vulnerability Exposure (CVE) ID: CVE-2015-3691 Common Vulnerability Exposure (CVE) ID: CVE-2015-3694 http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html BugTraq ID: 75491 http://www.securityfocus.com/bid/75491 Common Vulnerability Exposure (CVE) ID: CVE-2015-3689 Common Vulnerability Exposure (CVE) ID: CVE-2015-3688 http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html Common Vulnerability Exposure (CVE) ID: CVE-2015-3687 Common Vulnerability Exposure (CVE) ID: CVE-2015-3721 Common Vulnerability Exposure (CVE) ID: CVE-2015-3719 Common Vulnerability Exposure (CVE) ID: CVE-2015-3717 Common Vulnerability Exposure (CVE) ID: CVE-2015-3710 Common Vulnerability Exposure (CVE) ID: CVE-2015-3703 Common Vulnerability Exposure (CVE) ID: CVE-2015-3690 Common Vulnerability Exposure (CVE) ID: CVE-2015-3686 Common Vulnerability Exposure (CVE) ID: CVE-2015-3685 Common Vulnerability Exposure (CVE) ID: CVE-2015-3684 Common Vulnerability Exposure (CVE) ID: CVE-2015-3683 Common Vulnerability Exposure (CVE) ID: CVE-2015-3682 Common Vulnerability Exposure (CVE) ID: CVE-2015-3681 Common Vulnerability Exposure (CVE) ID: CVE-2015-3680 Common Vulnerability Exposure (CVE) ID: CVE-2015-3679 Common Vulnerability Exposure (CVE) ID: CVE-2015-3678 Common Vulnerability Exposure (CVE) ID: CVE-2015-3677 Common Vulnerability Exposure (CVE) ID: CVE-2015-3676 Common Vulnerability Exposure (CVE) ID: CVE-2015-3675 Common Vulnerability Exposure (CVE) ID: CVE-2015-3674 Common Vulnerability Exposure (CVE) ID: CVE-2015-3673 https://www.exploit-db.com/exploits/38036/ Common Vulnerability Exposure (CVE) ID: CVE-2015-3672 Common Vulnerability Exposure (CVE) ID: CVE-2015-3671 Common Vulnerability Exposure (CVE) ID: CVE-2015-0235 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html BugTraq ID: 72325 http://www.securityfocus.com/bid/72325 BugTraq ID: 91787 http://www.securityfocus.com/bid/91787 Bugtraq: 20150127 GHOST gethostbyname() heap overflow in glibc (CVE-2015-0235) (Google Search) http://seclists.org/oss-sec/2015/q1/269 Bugtraq: 20150127 Qualys Security Advisory CVE-2015-0235 - GHOST: glibc gethostbyname buffer overflow (Google Search) http://seclists.org/oss-sec/2015/q1/274 Bugtraq: 20150311 OpenSSL v1.0.2 for Linux affected by CVE-2015-0235 (Google Search) http://www.securityfocus.com/archive/1/534845/100/0/threaded Bugtraq: 20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series (Google Search) https://seclists.org/bugtraq/2019/Jun/14 Cisco Security Advisory: 20150128 GNU glibc gethostbyname Function Buffer Overflow Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost Debian Security Information: DSA-3142 (Google Search) http://www.debian.org/security/2015/dsa-3142 http://seclists.org/fulldisclosure/2015/Jan/111 http://seclists.org/fulldisclosure/2019/Jun/18 http://seclists.org/fulldisclosure/2021/Sep/0 http://seclists.org/fulldisclosure/2022/Jun/36 https://security.gentoo.org/glsa/201503-04 HPdes Security Advisory: HPSBGN03247 http://marc.info/?l=bugtraq&m=142296726407499&w=2 HPdes Security Advisory: HPSBGN03270 http://marc.info/?l=bugtraq&m=142781412222323&w=2 HPdes Security Advisory: HPSBGN03285 http://marc.info/?l=bugtraq&m=142722450701342&w=2 HPdes Security Advisory: HPSBHF03289 http://marc.info/?l=bugtraq&m=142721102728110&w=2 HPdes Security Advisory: HPSBMU03330 http://marc.info/?l=bugtraq&m=143145428124857&w=2 HPdes Security Advisory: SSRT101937 HPdes Security Advisory: SSRT101953 http://www.mandriva.com/security/advisories?name=MDVSA-2015:039 http://packetstormsecurity.com/files/130171/Exim-ESMTP-GHOST-Denial-Of-Service.html http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html http://packetstormsecurity.com/files/130974/Exim-GHOST-glibc-gethostbyname-Buffer-Overflow.html http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability https://www.arista.com/en/support/advisories-notices/security-advisories/1053-security-advisory-9 https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt http://www.openwall.com/lists/oss-security/2021/05/04/7 RedHat Security Advisories: RHSA-2015:0126 http://rhn.redhat.com/errata/RHSA-2015-0126.html http://www.securitytracker.com/id/1032909 http://secunia.com/advisories/62517 http://secunia.com/advisories/62640 http://secunia.com/advisories/62667 http://secunia.com/advisories/62680 http://secunia.com/advisories/62681 http://secunia.com/advisories/62688 http://secunia.com/advisories/62690 http://secunia.com/advisories/62691 http://secunia.com/advisories/62692 http://secunia.com/advisories/62698 http://secunia.com/advisories/62715 http://secunia.com/advisories/62758 http://secunia.com/advisories/62812 http://secunia.com/advisories/62813 http://secunia.com/advisories/62816 http://secunia.com/advisories/62865 http://secunia.com/advisories/62870 http://secunia.com/advisories/62871 http://secunia.com/advisories/62879 http://secunia.com/advisories/62883 Common Vulnerability Exposure (CVE) ID: CVE-2015-0273 BugTraq ID: 72701 http://www.securityfocus.com/bid/72701 Debian Security Information: DSA-3195 (Google Search) http://www.debian.org/security/2015/dsa-3195 https://security.gentoo.org/glsa/201606-10 HPdes Security Advisory: HPSBMU03380 http://marc.info/?l=bugtraq&m=143748090628601&w=2 HPdes Security Advisory: HPSBMU03409 http://marc.info/?l=bugtraq&m=144050155601375&w=2 HPdes Security Advisory: HPSBUX03337 http://marc.info/?l=bugtraq&m=143403519711434&w=2 HPdes Security Advisory: SSRT102066 http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 RedHat Security Advisories: RHSA-2015:1053 http://rhn.redhat.com/errata/RHSA-2015-1053.html RedHat Security Advisories: RHSA-2015:1066 http://rhn.redhat.com/errata/RHSA-2015-1066.html RedHat Security Advisories: RHSA-2015:1135 http://rhn.redhat.com/errata/RHSA-2015-1135.html RedHat Security Advisories: RHSA-2015:1218 http://rhn.redhat.com/errata/RHSA-2015-1218.html http://www.securitytracker.com/id/1031945 SuSE Security Announcement: SUSE-SU-2015:0424 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html SuSE Security Announcement: SUSE-SU-2015:0436 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html SuSE Security Announcement: openSUSE-SU-2015:0440 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html http://www.ubuntu.com/usn/USN-2535-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-1157 http://9to5mac.com/2015/05/27/how-to-fix-ios-text-message-bug-crash-reboot/ http://www.ibtimes.co.uk/apple-ios-bug-sees-message-app-crash-iphone-reboot-simply-by-receiving-message-1503083 http://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/ http://www.reddit.com/r/apple/comments/37enow/about_the_latest_iphone_security_vulnerability/ http://www.reddit.com/r/explainlikeimfive/comments/37edde/eli5_how_that_text_you_can_send_to_friends_turns/ http://zanzebek.com/a-simple-text-message-can-ruin-any-iphone/ https://ghostbin.com/paste/zws9m http://www.securitytracker.com/id/1032408 Common Vulnerability Exposure (CVE) ID: CVE-2015-4000 BugTraq ID: 74733 http://www.securityfocus.com/bid/74733 http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402 http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10681 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727 http://support.apple.com/kb/HT204941 http://support.apple.com/kb/HT204942 http://support.citrix.com/article/CTX201114 http://www-01.ibm.com/support/docview.wss?uid=swg21959111 http://www-01.ibm.com/support/docview.wss?uid=swg21959195 http://www-01.ibm.com/support/docview.wss?uid=swg21959325 http://www-01.ibm.com/support/docview.wss?uid=swg21959453 http://www-01.ibm.com/support/docview.wss?uid=swg21959481 http://www-01.ibm.com/support/docview.wss?uid=swg21959517 http://www-01.ibm.com/support/docview.wss?uid=swg21959530 http://www-01.ibm.com/support/docview.wss?uid=swg21959539 http://www-01.ibm.com/support/docview.wss?uid=swg21959636 http://www-01.ibm.com/support/docview.wss?uid=swg21959812 http://www-01.ibm.com/support/docview.wss?uid=swg21960191 http://www-01.ibm.com/support/docview.wss?uid=swg21961717 http://www-01.ibm.com/support/docview.wss?uid=swg21962455 http://www-01.ibm.com/support/docview.wss?uid=swg21962739 http://www-304.ibm.com/support/docview.wss?uid=swg21958984 http://www-304.ibm.com/support/docview.wss?uid=swg21959132 http://www-304.ibm.com/support/docview.wss?uid=swg21960041 http://www-304.ibm.com/support/docview.wss?uid=swg21960194 http://www-304.ibm.com/support/docview.wss?uid=swg21960380 http://www-304.ibm.com/support/docview.wss?uid=swg21960418 http://www-304.ibm.com/support/docview.wss?uid=swg21962816 http://www-304.ibm.com/support/docview.wss?uid=swg21967893 http://www.fortiguard.com/advisory/2015-05-20-logjam-attack http://www.mozilla.org/security/announce/2015/mfsa2015-70.html http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm https://bto.bluecoat.com/security-advisory/sa98 https://bugzilla.mozilla.org/show_bug.cgi?id=1138554 https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083 https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes https://kc.mcafee.com/corporate/index?page=content&id=SB10122 https://openssl.org/news/secadv/20150611.txt https://puppet.com/security/cve/CVE-2015-4000 https://security.netapp.com/advisory/ntap-20150619-0001/ https://support.citrix.com/article/CTX216642 https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us https://www-304.ibm.com/support/docview.wss?uid=swg21959745 https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403 https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/ https://www.openssl.org/news/secadv_20150611.txt https://www.suse.com/security/cve/CVE-2015-4000.html Debian Security Information: DSA-3287 (Google Search) http://www.debian.org/security/2015/dsa-3287 Debian Security Information: DSA-3300 (Google Search) http://www.debian.org/security/2015/dsa-3300 Debian Security Information: DSA-3316 (Google Search) http://www.debian.org/security/2015/dsa-3316 Debian Security Information: DSA-3324 (Google Search) http://www.debian.org/security/2015/dsa-3324 Debian Security Information: DSA-3339 (Google Search) http://www.debian.org/security/2015/dsa-3339 Debian Security Information: DSA-3688 (Google Search) http://www.debian.org/security/2016/dsa-3688 http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html https://security.gentoo.org/glsa/201506-02 https://security.gentoo.org/glsa/201512-10 https://security.gentoo.org/glsa/201603-11 https://security.gentoo.org/glsa/201701-46 HPdes Security Advisory: HPSBGN03351 http://marc.info/?l=bugtraq&m=143557934009303&w=2 HPdes Security Advisory: HPSBGN03361 http://marc.info/?l=bugtraq&m=143628304012255&w=2 HPdes Security Advisory: HPSBGN03362 http://marc.info/?l=bugtraq&m=143558092609708&w=2 HPdes Security Advisory: HPSBGN03373 http://marc.info/?l=bugtraq&m=143655800220052&w=2 HPdes Security Advisory: HPSBGN03399 http://marc.info/?l=bugtraq&m=144060576831314&w=2 HPdes Security Advisory: HPSBGN03402 http://marc.info/?l=bugtraq&m=144069189622016&w=2 HPdes Security Advisory: HPSBGN03404 http://marc.info/?l=bugtraq&m=144050121701297&w=2 HPdes Security Advisory: HPSBGN03405 http://marc.info/?l=bugtraq&m=144060606031437&w=2 HPdes Security Advisory: HPSBGN03407 http://marc.info/?l=bugtraq&m=144102017024820&w=2 HPdes Security Advisory: HPSBGN03411 http://marc.info/?l=bugtraq&m=144061542602287&w=2 HPdes Security Advisory: HPSBGN03533 http://marc.info/?l=bugtraq&m=145409266329539&w=2 HPdes Security Advisory: HPSBMU03345 http://marc.info/?l=bugtraq&m=144043644216842&w=2 HPdes Security Advisory: HPSBMU03356 http://marc.info/?l=bugtraq&m=143506486712441&w=2 HPdes Security Advisory: HPSBMU03401 http://marc.info/?l=bugtraq&m=144104533800819&w=2 HPdes Security Advisory: HPSBUX03363 http://marc.info/?l=bugtraq&m=143637549705650&w=2 HPdes Security Advisory: HPSBUX03388 http://marc.info/?l=bugtraq&m=143880121627664&w=2 HPdes Security Advisory: HPSBUX03512 http://marc.info/?l=bugtraq&m=144493176821532&w=2 HPdes Security Advisory: SSRT102112 https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196 HPdes Security Advisory: SSRT102180 HPdes Security Advisory: SSRT102254 https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/ https://weakdh.org/ https://weakdh.org/imperfect-forward-secrecy.pdf https://www.oracle.com/security-alerts/cpujan2021.html http://openwall.com/lists/oss-security/2015/05/20/8 NETBSD Security Advisory: NetBSD-SA2015-008 http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc RedHat Security Advisories: RHSA-2015:1072 http://rhn.redhat.com/errata/RHSA-2015-1072.html RedHat Security Advisories: RHSA-2015:1185 http://rhn.redhat.com/errata/RHSA-2015-1185.html RedHat Security Advisories: RHSA-2015:1197 http://rhn.redhat.com/errata/RHSA-2015-1197.html RedHat Security Advisories: RHSA-2015:1228 http://rhn.redhat.com/errata/RHSA-2015-1228.html RedHat Security Advisories: RHSA-2015:1229 http://rhn.redhat.com/errata/RHSA-2015-1229.html RedHat Security Advisories: RHSA-2015:1230 http://rhn.redhat.com/errata/RHSA-2015-1230.html RedHat Security Advisories: RHSA-2015:1241 http://rhn.redhat.com/errata/RHSA-2015-1241.html RedHat Security Advisories: RHSA-2015:1242 http://rhn.redhat.com/errata/RHSA-2015-1242.html RedHat Security Advisories: RHSA-2015:1243 http://rhn.redhat.com/errata/RHSA-2015-1243.html RedHat Security Advisories: RHSA-2015:1485 http://rhn.redhat.com/errata/RHSA-2015-1485.html RedHat Security Advisories: RHSA-2015:1486 http://rhn.redhat.com/errata/RHSA-2015-1486.html RedHat Security Advisories: RHSA-2015:1488 http://rhn.redhat.com/errata/RHSA-2015-1488.html RedHat Security Advisories: RHSA-2015:1526 http://rhn.redhat.com/errata/RHSA-2015-1526.html RedHat Security Advisories: RHSA-2015:1544 http://rhn.redhat.com/errata/RHSA-2015-1544.html RedHat Security Advisories: RHSA-2015:1604 http://rhn.redhat.com/errata/RHSA-2015-1604.html RedHat Security Advisories: RHSA-2016:1624 http://rhn.redhat.com/errata/RHSA-2016-1624.html RedHat Security Advisories: RHSA-2016:2056 http://rhn.redhat.com/errata/RHSA-2016-2056.html http://www.securitytracker.com/id/1032474 http://www.securitytracker.com/id/1032475 http://www.securitytracker.com/id/1032476 http://www.securitytracker.com/id/1032637 http://www.securitytracker.com/id/1032645 http://www.securitytracker.com/id/1032647 http://www.securitytracker.com/id/1032648 http://www.securitytracker.com/id/1032649 http://www.securitytracker.com/id/1032650 http://www.securitytracker.com/id/1032651 http://www.securitytracker.com/id/1032652 http://www.securitytracker.com/id/1032653 http://www.securitytracker.com/id/1032654 http://www.securitytracker.com/id/1032655 http://www.securitytracker.com/id/1032656 http://www.securitytracker.com/id/1032688 http://www.securitytracker.com/id/1032699 http://www.securitytracker.com/id/1032702 http://www.securitytracker.com/id/1032727 http://www.securitytracker.com/id/1032759 http://www.securitytracker.com/id/1032777 http://www.securitytracker.com/id/1032778 http://www.securitytracker.com/id/1032783 http://www.securitytracker.com/id/1032784 http://www.securitytracker.com/id/1032856 http://www.securitytracker.com/id/1032864 http://www.securitytracker.com/id/1032865 http://www.securitytracker.com/id/1032871 http://www.securitytracker.com/id/1032884 http://www.securitytracker.com/id/1032910 http://www.securitytracker.com/id/1032932 http://www.securitytracker.com/id/1032960 http://www.securitytracker.com/id/1033019 http://www.securitytracker.com/id/1033064 http://www.securitytracker.com/id/1033065 http://www.securitytracker.com/id/1033067 http://www.securitytracker.com/id/1033208 http://www.securitytracker.com/id/1033209 http://www.securitytracker.com/id/1033210 http://www.securitytracker.com/id/1033222 http://www.securitytracker.com/id/1033341 http://www.securitytracker.com/id/1033385 http://www.securitytracker.com/id/1033416 http://www.securitytracker.com/id/1033430 http://www.securitytracker.com/id/1033433 http://www.securitytracker.com/id/1033513 http://www.securitytracker.com/id/1033760 http://www.securitytracker.com/id/1033891 http://www.securitytracker.com/id/1033991 http://www.securitytracker.com/id/1034087 http://www.securitytracker.com/id/1034728 http://www.securitytracker.com/id/1034884 http://www.securitytracker.com/id/1036218 http://www.securitytracker.com/id/1040630 SuSE Security Announcement: SUSE-SU-2015:1143 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html SuSE Security Announcement: SUSE-SU-2015:1150 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html SuSE Security Announcement: SUSE-SU-2015:1177 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html SuSE Security Announcement: SUSE-SU-2015:1181 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html SuSE Security Announcement: SUSE-SU-2015:1182 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html SuSE Security Announcement: SUSE-SU-2015:1183 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html SuSE Security Announcement: SUSE-SU-2015:1184 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html SuSE Security Announcement: SUSE-SU-2015:1185 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html SuSE Security Announcement: SUSE-SU-2015:1268 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html SuSE Security Announcement: SUSE-SU-2015:1269 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html SuSE Security Announcement: SUSE-SU-2015:1319 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html SuSE Security Announcement: SUSE-SU-2015:1320 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html SuSE Security Announcement: SUSE-SU-2015:1449 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html SuSE Security Announcement: SUSE-SU-2015:1581 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html SuSE Security Announcement: SUSE-SU-2015:1663 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html SuSE Security Announcement: SUSE-SU-2016:0224 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html SuSE Security Announcement: SUSE-SU-2016:0262 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html SuSE Security Announcement: openSUSE-SU-2015:1139 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html SuSE Security Announcement: openSUSE-SU-2015:1209 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html SuSE Security Announcement: openSUSE-SU-2015:1229 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html SuSE Security Announcement: openSUSE-SU-2015:1266 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html SuSE Security Announcement: openSUSE-SU-2015:1277 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html SuSE Security Announcement: openSUSE-SU-2015:1288 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html SuSE Security Announcement: openSUSE-SU-2015:1289 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html SuSE Security Announcement: openSUSE-SU-2015:1684 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html SuSE Security Announcement: openSUSE-SU-2016:0226 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html SuSE Security Announcement: openSUSE-SU-2016:0255 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html SuSE Security Announcement: openSUSE-SU-2016:0261 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html SuSE Security Announcement: openSUSE-SU-2016:0478 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html SuSE Security Announcement: openSUSE-SU-2016:0483 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html http://www.ubuntu.com/usn/USN-2656-1 http://www.ubuntu.com/usn/USN-2656-2 http://www.ubuntu.com/usn/USN-2673-1 http://www.ubuntu.com/usn/USN-2696-1 http://www.ubuntu.com/usn/USN-2706-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-8127 1032760 72323 http://www.securityfocus.com/bid/72323 DSA-3273 http://www.debian.org/security/2015/dsa-3273 GLSA-201701-16 https://security.gentoo.org/glsa/201701-16 RHSA-2016:1546 http://rhn.redhat.com/errata/RHSA-2016-1546.html RHSA-2016:1547 http://rhn.redhat.com/errata/RHSA-2016-1547.html [oss-security] 20150124 Multiple vulnerabilities in LibTIFF and associated tools http://www.openwall.com/lists/oss-security/2015/01/24/15 http://bugzilla.maptools.org/show_bug.cgi?id=2484 http://bugzilla.maptools.org/show_bug.cgi?id=2485 http://bugzilla.maptools.org/show_bug.cgi?id=2486 http://bugzilla.maptools.org/show_bug.cgi?id=2496 http://bugzilla.maptools.org/show_bug.cgi?id=2497 http://bugzilla.maptools.org/show_bug.cgi?id=2500 http://www.conostix.com/pub/adv/CVE-2014-8127-LibTIFF-Out-of-bounds_Reads.txt openSUSE-SU-2015:0450 http://lists.opensuse.org/opensuse-updates/2015-03/msg00022.html Common Vulnerability Exposure (CVE) ID: CVE-2014-8128 http://openwall.com/lists/oss-security/2015/01/24/15 http://www.conostix.com/pub/adv/CVE-2014-8128-LibTIFF-Out-of-bounds_Writes.txt https://bugzilla.redhat.com/show_bug.cgi?id=1185812 Common Vulnerability Exposure (CVE) ID: CVE-2014-8129 72352 http://www.securityfocus.com/bid/72352 APPLE-SA-2015-06-30-1 APPLE-SA-2015-06-30-2 https://www.debian.org/security/2015/dsa-3273 http://bugzilla.maptools.org/show_bug.cgi?id=2487 http://bugzilla.maptools.org/show_bug.cgi?id=2488 http://www.conostix.com/pub/adv/CVE-2014-8129-LibTIFF-Out-of-bounds_Reads_and_Writes.txt https://bugzilla.redhat.com/show_bug.cgi?id=1185815 Common Vulnerability Exposure (CVE) ID: CVE-2014-8130 72353 http://www.securityfocus.com/bid/72353 http://bugzilla.maptools.org/show_bug.cgi?id=2483 http://www.conostix.com/pub/adv/CVE-2014-8130-LibTIFF-Division_By_Zero.txt https://bugzilla.redhat.com/show_bug.cgi?id=1185817 https://github.com/vadz/libtiff/commit/3c5eb8b1be544e41d2c336191bc4936300ad7543 Common Vulnerability Exposure (CVE) ID: CVE-2015-1798 1032032 http://www.securitytracker.com/id/1032032 20150408 Multiple Vulnerabilities in ntpd (April 2015) Affecting Cisco Products http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150408-ntpd 20150408 Network Time Protocol Daemon MAC Checking Failure Authentication Bypass Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=38276 73951 http://www.securityfocus.com/bid/73951 DSA-3223 http://www.debian.org/security/2015/dsa-3223 FEDORA-2015-5761 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155864.html FEDORA-2015-5874 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155863.html GLSA-201509-01 https://security.gentoo.org/glsa/201509-01 HPSBUX03333 http://marc.info/?l=bugtraq&m=143213867103400&w=2 MDVSA-2015:202 http://www.mandriva.com/security/advisories?name=MDVSA-2015:202 RHSA-2015:1459 http://rhn.redhat.com/errata/RHSA-2015-1459.html SSRT102029 USN-2567-1 http://www.ubuntu.com/usn/USN-2567-1 VU#374268 http://www.kb.cert.org/vuls/id/374268 http://bugs.ntp.org/show_bug.cgi?id=2779 http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html https://kc.mcafee.com/corporate/index?page=content&id=SB10114 openSUSE-SU-2015:0775 http://lists.opensuse.org/opensuse-updates/2015-04/msg00052.html Common Vulnerability Exposure (CVE) ID: CVE-2015-1799 1032031 http://www.securitytracker.com/id/1032031 20150408 Network Time Protocol Daemon Symmetric Mode Packet Processing Denial of Service Vulnerability http://tools.cisco.com/security/center/viewAlert.x?alertId=38275 73950 http://www.securityfocus.com/bid/73950 DSA-3222 http://www.debian.org/security/2015/dsa-3222 HPSBHF03557 http://marc.info/?l=bugtraq&m=145750740530849&w=2 [chrony-announce] 20150407 chrony-1.31.1 released (security) http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html http://bugs.ntp.org/show_bug.cgi?id=2781 Common Vulnerability Exposure (CVE) ID: CVE-2015-0209 BugTraq ID: 73239 http://www.securityfocus.com/bid/73239 Debian Security Information: DSA-3197 (Google Search) http://www.debian.org/security/2015/dsa-3197 http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html FreeBSD Security Advisory: FreeBSD-SA-15:06 https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc https://security.gentoo.org/glsa/201503-11 HPdes Security Advisory: HPSBGN03306 http://marc.info/?l=bugtraq&m=142841429220765&w=2 HPdes Security Advisory: HPSBMU03397 http://marc.info/?l=bugtraq&m=144050297101809&w=2 HPdes Security Advisory: HPSBMU03413 http://marc.info/?l=bugtraq&m=144050254401665&w=2 HPdes Security Advisory: HPSBUX03334 http://marc.info/?l=bugtraq&m=143213830203296&w=2 HPdes Security Advisory: SSRT102000 http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 http://www.mandriva.com/security/advisories?name=MDVSA-2015:063 RedHat Security Advisories: RHSA-2015:0715 http://rhn.redhat.com/errata/RHSA-2015-0715.html RedHat Security Advisories: RHSA-2015:0716 http://rhn.redhat.com/errata/RHSA-2015-0716.html RedHat Security Advisories: RHSA-2015:0752 http://rhn.redhat.com/errata/RHSA-2015-0752.html RedHat Security Advisories: RHSA-2016:1089 http://rhn.redhat.com/errata/RHSA-2016-1089.html RedHat Security Advisories: RHSA-2016:2957 http://rhn.redhat.com/errata/RHSA-2016-2957.html http://www.securitytracker.com/id/1031929 SuSE Security Announcement: SUSE-SU-2015:0541 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html SuSE Security Announcement: openSUSE-SU-2015:0554 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html SuSE Security Announcement: openSUSE-SU-2016:0640 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html http://www.ubuntu.com/usn/USN-2537-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-0286 http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html BugTraq ID: 73225 http://www.securityfocus.com/bid/73225 http://www.securitytracker.com/id/1032917 SuSE Security Announcement: SUSE-SU-2015:0578 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html Common Vulnerability Exposure (CVE) ID: CVE-2015-0287 BugTraq ID: 73227 http://www.securityfocus.com/bid/73227 RedHat Security Advisories: RHSA-2015:0800 http://rhn.redhat.com/errata/RHSA-2015-0800.html SuSE Security Announcement: SUSE-SU-2016:0678 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html Common Vulnerability Exposure (CVE) ID: CVE-2015-0288 BugTraq ID: 73237 http://www.securityfocus.com/bid/73237 Common Vulnerability Exposure (CVE) ID: CVE-2015-0289 BugTraq ID: 73231 http://www.securityfocus.com/bid/73231 Common Vulnerability Exposure (CVE) ID: CVE-2015-0293 BugTraq ID: 73232 http://www.securityfocus.com/bid/73232 SuSE Security Announcement: SUSE-SU-2016:0617 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html SuSE Security Announcement: SUSE-SU-2016:0620 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html SuSE Security Announcement: SUSE-SU-2016:0621 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html SuSE Security Announcement: SUSE-SU-2016:0624 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html SuSE Security Announcement: SUSE-SU-2016:0631 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html SuSE Security Announcement: SUSE-SU-2016:0641 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html SuSE Security Announcement: SUSE-SU-2016:1057 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html SuSE Security Announcement: openSUSE-SU-2016:0628 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html SuSE Security Announcement: openSUSE-SU-2016:0637 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html SuSE Security Announcement: openSUSE-SU-2016:0638 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html SuSE Security Announcement: openSUSE-SU-2016:0720 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html Common Vulnerability Exposure (CVE) ID: CVE-2015-3661 http://lists.apple.com/archives/security-announce/2015/Jun/msg00005.html http://www.securitytracker.com/id/1032756 Common Vulnerability Exposure (CVE) ID: CVE-2015-3662 Common Vulnerability Exposure (CVE) ID: CVE-2015-3663 Common Vulnerability Exposure (CVE) ID: CVE-2015-3666 Common Vulnerability Exposure (CVE) ID: CVE-2015-3667 Common Vulnerability Exposure (CVE) ID: CVE-2015-3668 Common Vulnerability Exposure (CVE) ID: CVE-2013-1741 BugTraq ID: 63736 http://www.securityfocus.com/bid/63736 Bugtraq: 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/534161/100/0/threaded Debian Security Information: DSA-2994 (Google Search) http://www.debian.org/security/2014/dsa-2994 http://seclists.org/fulldisclosure/2014/Dec/23 http://security.gentoo.org/glsa/glsa-201406-19.xml https://security.gentoo.org/glsa/201504-01 RedHat Security Advisories: RHSA-2013:1791 http://rhn.redhat.com/errata/RHSA-2013-1791.html RedHat Security Advisories: RHSA-2013:1829 http://rhn.redhat.com/errata/RHSA-2013-1829.html SuSE Security Announcement: SUSE-SU-2013:1807 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00000.html SuSE Security Announcement: openSUSE-SU-2013:1732 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-11/msg00080.html http://www.ubuntu.com/usn/USN-2030-1 http://www.ubuntu.com/usn/USN-2031-1 http://www.ubuntu.com/usn/USN-2032-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-7036 https://security.gentoo.org/glsa/201612-21 http://zerodayinitiative.com/advisories/ZDI-15-570/ Common Vulnerability Exposure (CVE) ID: CVE-2014-8139 http://www.ocert.org/advisories/ocert-2014-011.html http://www.securitytracker.com/id/1031433 https://access.redhat.com/errata/RHSA-2015:0700 https://bugzilla.redhat.com/show_bug.cgi?id=1174844 Common Vulnerability Exposure (CVE) ID: CVE-2014-8140 https://bugzilla.redhat.com/show_bug.cgi?id=1174851 Common Vulnerability Exposure (CVE) ID: CVE-2014-8141 https://bugzilla.redhat.com/show_bug.cgi?id=1174856
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.