Apple Mac OS X Security Update (HT214048)
🗓️ 08 Jan 2024 00:00:00Reported by Copyright (C) 2024 Greenbone AGType
openvas🔗 plugins.openvas.org👁 34 Views
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
| About the security content of macOS Sonoma 14.2.1 | 19 Dec 202300:00 | – | apple | |
| The vulnerability of the WindowServer component of the macOS operating system, which allows a hacker to gain unauthorized access to the user’s screen. | 25 Feb 202400:00 | – | bdu_fstec | |
| CVE-2023-42940 | 20 Dec 202313:53 | – | circl | |
| Apple macOS Sonoma Security Vulnerability | 19 Dec 202300:00 | – | cnnvd | |
| CVE-2023-42940 | 19 Dec 202321:13 | – | cve | |
| CVE-2023-42940 | 19 Dec 202321:13 | – | cvelist | |
| macOS 14.x < 14.2.1 (HT214048) | 19 Dec 202300:00 | – | nessus | |
| CVE-2023-42940 | 19 Dec 202322:15 | – | nvd | |
| CVE-2023-42940 | 19 Dec 202322:15 | – | osv | |
| Session fixation | 19 Dec 202322:15 | – | prion |
10
| Source | Link |
|---|---|
| support | www.support.apple.com/en-us/HT214048 |
# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.832761");
script_version("2024-02-09T14:47:30+0000");
script_cve_id("CVE-2023-42940");
script_tag(name:"cvss_base", value:"6.8");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:S/C:C/I:N/A:N");
script_tag(name:"last_modification", value:"2024-02-09 14:47:30 +0000 (Fri, 09 Feb 2024)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2024-01-04 14:56:00 +0000 (Thu, 04 Jan 2024)");
script_tag(name:"creation_date", value:"2024-01-08 14:54:24 +0530 (Mon, 08 Jan 2024)");
script_name("Apple Mac OS X Security Update (HT214048)");
script_tag(name:"summary", value:"Apple Mac OS X is prone to an unspecified
vulnerability.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
on the target host.");
script_tag(name:"insight", value:"The flaw exists due to a session rendering
issue in Apple macOS Sonoma.");
script_tag(name:"impact", value:"Successful exploitation will allow users who
shares their screen to share the incorrect content unintentionally.");
script_tag(name:"affected", value:"Apple macOS Sonoma prior to version 14.2.1");
script_tag(name:"solution", value:"Upgrade to version 14.2.1 for macOS Sonoma.");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
script_xref(name:"URL", value:"https://support.apple.com/en-us/HT214048");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2024 Greenbone AG");
script_family("Mac OS X Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/osx_name", "ssh/login/osx_version");
exit(0);
}
include("version_func.inc");
osName = get_kb_item("ssh/login/osx_name");
if(!osName)
exit(0);
osVer = get_kb_item("ssh/login/osx_version");
if(!osVer || osVer !~ "^14\." || "Mac OS X" >!< osName) {
exit(0);
}
if(version_is_less(version:osVer, test_version:"14.2.1")) {
report = report_fixed_ver(installed_version:osVer, fixed_version:"14.2.1");
security_message(port:0, data:report);
exit(0);
}
exit(99);
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
09 Feb 2024 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 3.15.7
EPSS0.00707
SSVC