Lucene search

K
openvasCopyright (C) 2024 Greenbone AGOPENVAS:1361412562310832981
HistoryMay 14, 2024 - 12:00 a.m.

Apple MacOSX Security Update (HT214105)

2024-05-1400:00:00
Copyright (C) 2024 Greenbone AG
plugins.openvas.org
8
apple macosx
security update
multiple vulnerabilities
update
version 12.7.5

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

46.8%

Apple Mac OS X is prone to multiple
vulnerabilities.

# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.832981");
  script_version("2024-08-01T05:05:42+0000");
  script_cve_id("CVE-2024-27805", "CVE-2024-27817", "CVE-2024-27831", "CVE-2024-27798",
                "CVE-2024-23229", "CVE-2024-27789", "CVE-2024-27799", "CVE-2024-27840",
                "CVE-2024-27810", "CVE-2024-27800", "CVE-2024-27802", "CVE-2024-27885",
                "CVE-2024-27824", "CVE-2024-27843", "CVE-2024-27806", "CVE-2024-27847",
                "CVE-2024-27796", "CVE-2024-27823");
  script_tag(name:"cvss_base", value:"7.2");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2024-08-01 05:05:42 +0000 (Thu, 01 Aug 2024)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2024-06-27 17:29:26 +0000 (Thu, 27 Jun 2024)");
  script_tag(name:"creation_date", value:"2024-05-14 15:02:42 +0530 (Tue, 14 May 2024)");
  script_name("Apple MacOSX Security Update (HT214105)");

  script_tag(name:"summary", value:"Apple Mac OS X is prone to multiple
  vulnerabilities.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"These vulnerabilities exist:

  - CVE-2024-23229: This issue was addressed with improved redaction of sensitive information

  - CVE-2024-27789: A logic issue was addressed with improved checks");

  script_tag(name:"impact", value:"Successful exploitation allows an attacker
  to obtain sensitive information.");

  script_tag(name:"affected", value:"Apple macOS Monterey prior to version
  12.7.5.");

  script_tag(name:"solution", value:"Update macOS Monterey to version 12.7.5 or
  later.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");
  script_xref(name:"URL", value:"https://support.apple.com/en-us/HT214105");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2024 Greenbone AG");
  script_family("Mac OS X Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/osx_name", "ssh/login/osx_version");
  exit(0);
}

include("version_func.inc");
include("ssh_func.inc");

osName = get_kb_item("ssh/login/osx_name");
if(!osName) {
  exit (0);
}

osVer = get_kb_item("ssh/login/osx_version");
if(!osVer || osVer !~ "^12\." || "Mac OS X" >!< osName) {
  exit(0);
}

if(version_is_less(version:osVer, test_version:"12.7.5")) {
  report = report_fixed_ver(installed_version:osVer, fixed_version:"12.7.5");
  security_message(port:0, data:report);
  exit(0);
}

exit(99);

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

46.8%

Related for OPENVAS:1361412562310832981