Lucene search

K
openvasCopyright (C) 2023 Greenbone AGOPENVAS:1361412562310826952
HistoryMar 29, 2023 - 12:00 a.m.

Apple Mac OS X Security Update (HT213677)

2023-03-2900:00:00
Copyright (C) 2023 Greenbone AG
plugins.openvas.org
18
apple mac os x
vulnerabilities
validation issues
authentication issues
memory handling
elevated privileges
arbitrary code
kernel privileges
sensitive information
security restrictions
monterey
upgrade
vendor fix.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

Low

EPSS

0.006

Percentile

79.3%

Apple Mac OS X is prone to multiple
vulnerabilities.

# Copyright (C) 2023 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.826952");
  script_version("2024-08-01T05:05:42+0000");
  script_cve_id("CVE-2023-0433", "CVE-2023-0512", "CVE-2023-23514", "CVE-2023-23527",
                "CVE-2023-23533", "CVE-2023-23538", "CVE-2023-23540", "CVE-2023-23542",
                "CVE-2023-27933", "CVE-2023-27935", "CVE-2023-27936", "CVE-2023-27937",
                "CVE-2023-27942", "CVE-2023-27944", "CVE-2023-27946", "CVE-2023-27949",
                "CVE-2023-27951", "CVE-2023-27953", "CVE-2023-27955", "CVE-2023-27958",
                "CVE-2023-27961", "CVE-2023-27962", "CVE-2023-27963", "CVE-2023-28178",
                "CVE-2023-28182", "CVE-2023-28192", "CVE-2023-28200", "CVE-2023-28197",
                "CVE-2023-32366", "CVE-2023-32378", "CVE-2023-41075", "CVE-2023-28185",
                "CVE-2023-23537", "CVE-2023-28199", "CVE-2023-27941", "CVE-2023-23536",
                "CVE-2023-40398");
  script_tag(name:"cvss_base", value:"10.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2024-08-01 05:05:42 +0000 (Thu, 01 Aug 2024)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2023-05-12 18:47:00 +0000 (Fri, 12 May 2023)");
  script_tag(name:"creation_date", value:"2023-03-29 11:22:17 +0530 (Wed, 29 Mar 2023)");
  script_name("Apple Mac OS X Security Update (HT213677)");

  script_tag(name:"summary", value:"Apple Mac OS X is prone to multiple
  vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"Multiple flaws exist due to,

  - Multiple validation issues.

  - Multiple authentication issues.

  - Multiple memory handling issues.");

  script_tag(name:"impact", value:"Successful exploitation will allow attackers to
  gain elevated privileges, execute arbitrary code with kernel privileges,
  disclose sensitive information and bypass security restrictions.");

  script_tag(name:"affected", value:"Apple Mac OS X Monterey versions 12.x before
  12.6.4.");

  script_tag(name:"solution", value:"Upgrade to Apple Mac OS X Monterey version
  12.6.4 or later. Please see the references for more information.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");
  script_xref(name:"URL", value:"https://support.apple.com/en-us/HT213677");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2023 Greenbone AG");
  script_family("Mac OS X Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/osx_name", "ssh/login/osx_version");
  exit(0);
}
include("version_func.inc");
include("ssh_func.inc");

osName = get_kb_item("ssh/login/osx_name");
if(!osName){
  exit (0);
}

osVer = get_kb_item("ssh/login/osx_version");
if(!osVer || osVer !~ "^12\." || "Mac OS X" >!< osName){
  exit(0);
}

if(version_is_less(version:osVer, test_version:"12.6.4"))
{
  report = report_fixed_ver(installed_version:osVer, fixed_version:"12.6.4");
  security_message(data:report);
  exit(0);
}
exit(99);

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

Low

EPSS

0.006

Percentile

79.3%