Vulnerability   
Search   
    Search 187964 CVE descriptions
and 85075 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.817133
Category:Mac OS X Local Security Checks
Title:Apple MacOSX Security Updates(HT211170)-04
Summary:This host is installed with Apple Mac OS X; and is prone to multiple vulnerabilities.
Description:Summary:
This host is installed with Apple Mac OS X
and is prone to multiple vulnerabilities.

Vulnerability Insight:
Multiple flaws exists due to,

- An error in permissions issued.

- An out-of-bounds write error.

- A memory initialization error.

- Multiple out-of-bounds read errors.

- Multiple memory corruption issues.

- An error in state management.

- An integer overflow.

- An authorization issue.

- An error in input validation.

- Presence of vulnerable code.

- A race condition.

- An error in the handling of environment variables.

- A logic error resulting in memory corruption.

- A use after free error.

Vulnerability Impact:
Successful exploitation will allow remote
attackers gain root privileges, conduct a denial-of-service, execute arbitrary
code, read kernel memory, elevate privileges, escape sandbox and gain access to
sensitive information.

Affected Software/OS:
Apple Mac OS X versions 10.13.x through
10.13.6, 10.14.x through 10.14.6 and 10.15.x through 10.15.4

Solution:
Apply security update 2020-003 for Apple
Mac OS X version 10.13.x and 10.14.x, or upgrade to version 10.15.5 or later.
Please see the references for more information.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2020-9817
https://support.apple.com/HT211170
Common Vulnerability Exposure (CVE) ID: CVE-2020-9816
https://support.apple.com/HT211168
https://support.apple.com/HT211171
https://support.apple.com/HT211175
Common Vulnerability Exposure (CVE) ID: CVE-2020-9830
Common Vulnerability Exposure (CVE) ID: CVE-2020-9833
Common Vulnerability Exposure (CVE) ID: CVE-2020-9832
Common Vulnerability Exposure (CVE) ID: CVE-2020-9834
Common Vulnerability Exposure (CVE) ID: CVE-2020-9811
Common Vulnerability Exposure (CVE) ID: CVE-2020-9812
Common Vulnerability Exposure (CVE) ID: CVE-2020-9841
Common Vulnerability Exposure (CVE) ID: CVE-2020-9789
https://support.apple.com/HT211178
https://support.apple.com/HT211179
https://support.apple.com/HT211181
Common Vulnerability Exposure (CVE) ID: CVE-2020-9790
Common Vulnerability Exposure (CVE) ID: CVE-2020-9808
Common Vulnerability Exposure (CVE) ID: CVE-2020-9809
Common Vulnerability Exposure (CVE) ID: CVE-2020-9847
Common Vulnerability Exposure (CVE) ID: CVE-2020-9822
Common Vulnerability Exposure (CVE) ID: CVE-2020-9821
Common Vulnerability Exposure (CVE) ID: CVE-2020-9826
Common Vulnerability Exposure (CVE) ID: CVE-2020-9797
Common Vulnerability Exposure (CVE) ID: CVE-2020-9839
http://packetstormsecurity.com/files/159084/macOS-cfprefsd-Arbitrary-File-Write-Local-Privilege-Escalation.html
Common Vulnerability Exposure (CVE) ID: CVE-2020-9813
Common Vulnerability Exposure (CVE) ID: CVE-2020-9814
Common Vulnerability Exposure (CVE) ID: CVE-2020-9795
CopyrightCopyright (C) 2020 Greenbone Networks GmbH

This is only one of 85075 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2020 E-Soft Inc. All rights reserved.