Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression - Configuration Profiles - CoreGraphics - CoreMedi...

Oracle Linux 7 : grub2 (ELSA-2015-2401)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2401 advisory. - Once again, rebuild for the right build target. Resolves: CVE-2015-5281 - Remove multiboot and multiboot2 modules from the .efi builds; they should never have...

grub2 security, bug fix, and enhancement update

2.02-0.29.0.1 - Fix comparison in patch for 18504756 - Remove symlink to grub environment file during uninstall on EFI platforms bug 19231481 - update Oracle Linux certificates Alexey Petrenko - Put 'with' in menuentry instead of 'using' bug 18504756 - Use different titles for UEK and RHCK kernel...

Low: Red Hat Security Advisory: grub2 security, bug fix, and enhancement update

Updated grub2 packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Mac OS X Unauthenticated Access

The vulnerability of the EFI module in the Mac OS X operating system is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to gain access to undeclared functions...

Mac OS X EFI Function Execution Vulnerability (EFI Security Update 2015-002)

The remote Mac OS X host is running an EFI firmware version that is affected by a function execution vulnerability due to an issue with handling EFI arguments. An unauthenticated, remote attacker can exploit this to execute arbitrary functions via unspecified vectors. TRUSTED...

Apple Mac EFI Unauthorized Access Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. Apple OS X versions prior to 10.11.1 and other products and Apple Mac versions prior to EFI 2015-002 improperly handle parameters and contain a security vulnerability that can be...

Mac OS X < 10.11 Multiple Vulnerabilities

Binary data 8982.prm...

Apple Mac OS X / Mac EFI / OS X Server multiple security vulnerabilities

Code execution, information disclosure, restrictions bypass, multiple memory corruptions, multiple libraries vulnerabilities...

APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002

APPLE-SA-2015-10-21-6 Mac EFI Security Update 2015-002 Mac EFI Security Update 2015-002 is now available and addresses the following: EFI Available for: OS X Mavericks v10.9.5 Impact: An attacker can exercise unused EFI functions Description: An issue existed with EFI argument handling. This was...

CVE-2015-7035

Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors...

Design/Logic Flaw

Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors...

CVE-2015-7035

Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors...

CVE-2015-7035

CVE-2015-7035 affects Apple Mac EFI: EFI arguments mishandled in Mac OS X pre-10.11.1, enabling an attacker to exercise unused EFI functions via unspecified vectors. Documented remediation is Mac EFI Security Update 2015-002 (APPLE-SA-2015-10-21-6). Connected sources confirm EFI involvement and C...

PT-2015-2446

Name of the Vulnerable Software and Affected Versions Apple Mac EFI versions before 2015-002 OS X versions prior to 10.11.1 Description The issue is related to errors in the code of the EFI module in Mac OS X, which can be exploited by a remote attacker to access undeclared functions. The...

CVE-2015-7035: Undefined Security Weakness

Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors...

Apple Releases Multiple Security Updates

Apple has released several security updates to address critical vulnerabilities in multiple Apple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: OS X Server 5.0.15 for OS X Yosemite v10.10.5 and...

Mac OS X Modification

The vulnerability of the EFI component in the Mac OS X operating system is related to errors in the code. Exploiting this vulnerability allows an intruder to modify the microprogramming software using a third-party storage device connected to the Thunderbolt interface...

Mac OS X < 10.10.4 Multiple Vulnerabilities

Binary data 8801.prm...

CVE-2015-5914

The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM, aka a "Thunderstrike" issue. NOTE: this issue exists because of an incomplete...