Lucene search
+L

Apple Mac OS X Multiple Vulnerabilities-01 (Feb 2017)

🗓️ 22 Feb 2017 00:00:00Reported by Copyright (C) 2017 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 74 Views

Apple Mac OS X Multiple Vulnerabilities-01 (Feb 2017) is prone to multiple vulnerabilities. Successful exploitation allows attackers to execute arbitrary code, cause denial of service, gain access to sensitive information, bypass protection mechanisms, and have other impacts. Affected version is 10.12.x through 10.12.1. Solution: Upgrade to version 10.12.2 or later

Related
Refs
Code
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in OpenSSL affects IBM Rational ClearCase (CVE-2016-2177, CVE-2016-2178, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303, CVE-2016-6304, CVE-2016-6306)
10 Jul 201808:34
ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple Security vulnerabilities fixed in IBM Security Privileged Identity Manager
16 Jun 201821:59
ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Security Guardium is affected by OpenSSL Security Advisory [22 Sep 2016] and [26 Sep 2016] vulnerabilities (multiple CVEs)
16 Jun 201821:47
ibm
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in cURL affect PowerKVM
18 Jun 201801:34
ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System Manager (FSM) Storage Manager Install Anywhere (SMIA) configuration tool
18 Jun 201801:34
ibm
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in OpenSSL affect IBM SmartCloud Entry
19 Jul 202000:49
ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Image Construction and Composition Tool.
15 Jun 201807:06
ibm
ibm
IBM Security Bulletins
IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index
31 Jan 202100:10
ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities may affect IBM® SDK for Node.js™
9 Aug 201804:20
ibm
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Aspera Enterprise Server, Connect Server, Point to Point Client, Desktop Client, Faspstream, Cargo, and Sync (CVE-2016-6302 CVE-2016-6304 CVE-2016-6303 CVE-2016-2182 CVE-2016-2177 CVE-2016-2178 ...)
15 Jun 201807:08
ibm
Rows per page
# SPDX-FileCopyrightText: 2017 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.810567");
  script_version("2026-04-28T06:28:06+0000");
  script_cve_id("CVE-2016-7411", "CVE-2016-7412", "CVE-2016-7413", "CVE-2016-7414",
                "CVE-2016-7416", "CVE-2016-7417", "CVE-2016-7418", "CVE-2016-7609",
                "CVE-2016-7628", "CVE-2016-7658", "CVE-2016-7659", "CVE-2016-7624",
                "CVE-2016-7605", "CVE-2016-7617", "CVE-2016-7647", "CVE-2016-7663",
                "CVE-2016-7627", "CVE-2016-7655", "CVE-2016-7588", "CVE-2016-7603",
                "CVE-2016-7595", "CVE-2016-7667", "CVE-2016-5419", "CVE-2016-5420",
                "CVE-2016-5421", "CVE-2016-7141", "CVE-2016-7167", "CVE-2016-8615",
                "CVE-2016-8616", "CVE-2016-8617", "CVE-2016-8618", "CVE-2016-8619",
                "CVE-2016-8620", "CVE-2016-8621", "CVE-2016-8622", "CVE-2016-8623",
                "CVE-2016-8624", "CVE-2016-8625", "CVE-2016-7633", "CVE-2016-7616",
                "CVE-2016-4691", "CVE-2016-7618", "CVE-2016-7622", "CVE-2016-7594",
                "CVE-2016-7643", "CVE-2016-7602", "CVE-2016-7608", "CVE-2016-7591",
                "CVE-2016-7657", "CVE-2016-7625", "CVE-2016-7714", "CVE-2016-7620",
                "CVE-2016-7606", "CVE-2016-7612", "CVE-2016-7607", "CVE-2016-7615",
                "CVE-2016-7621", "CVE-2016-7637", "CVE-2016-7644", "CVE-2016-7629",
                "CVE-2016-7619", "CVE-2016-1777", "CVE-2016-7600", "CVE-2016-7742",
                "CVE-2016-6303", "CVE-2016-6304", "CVE-2016-7661", "CVE-2016-4693",
                "CVE-2016-7636", "CVE-2016-7662", "CVE-2016-7660", "CVE-2016-7761");
  script_tag(name:"cvss_base", value:"9.3");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2026-04-28 06:28:06 +0000 (Tue, 28 Apr 2026)");
  script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2018-11-13 11:29:00 +0000 (Tue, 13 Nov 2018)");
  script_tag(name:"creation_date", value:"2017-02-22 17:03:09 +0530 (Wed, 22 Feb 2017)");
  script_name("Apple Mac OS X Multiple Vulnerabilities-01 (Feb 2017)");

  script_tag(name:"summary", value:"Apple Mac OS X is prone to multiple vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"Please see the references for more information on the vulnerabilities.");

  script_tag(name:"impact", value:"Successful exploitation will allow attacker
  to execute arbitrary code or cause a denial of service (memory corruption),
  gain access to potentially sensitive information, bypass certain protection
  mechanism and have other impacts.");

  script_tag(name:"affected", value:"Apple Mac OS X version 10.12.x through
  10.12.1");

  script_tag(name:"solution", value:"Upgrade to Apple Mac OS X version
  10.12.2 or later.");

  script_tag(name:"solution_type", value:"VendorFix");

  script_tag(name:"qod_type", value:"package");

  script_xref(name:"URL", value:"https://support.apple.com/en-us/HT207423");

  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2017 Greenbone AG");
  script_family("Mac OS X Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/osx_name", "ssh/login/osx_version", re:"ssh/login/osx_version=^10\.12");
  exit(0);
}

include("version_func.inc");

osName = get_kb_item("ssh/login/osx_name");
if(!osName)
  exit(0);

osVer = get_kb_item("ssh/login/osx_version");
if(!osVer){
  exit(0);
}

if("Mac OS X" >< osName)
{
  if(osVer =~ "^10\.12" && version_is_less(version:osVer, test_version:"10.12.2"))
  {
    report = report_fixed_ver(installed_version:osVer, fixed_version:"10.12.2");
    security_message(data:report);
    exit(0);
  }
  exit(99);
}

exit(0);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Apr 2026 00:00Current
7.3High risk
Vulners AI Score7.3
CVSS 29.3
CVSS 36.5 - 9.8
CVSS 3.19.8
EPSS0.63029
SSVC
74