CVE-2013-5192

CVE-2013-5192 affects Apple Mac OS X before 10.9. The USB hub controller is susceptible to a denial of service (system crash) when a crafted request targets (1) a port or (2) a port number. This description is consistent across multiple sources (NVD/Red Hat cve page); no public details on the und...

CVE-2013-5191

The syslog implementation in Apple Mac OS X before 10.9 allows local users to obtain sensitive information by leveraging access to the Guest account and reading console-log messages from previous Guest sessions...

CVE-2013-5172

The kernel in Apple Mac OS X before 10.9 does not properly determine the output length for SHA-2 digest function calls, which allows context-dependent attackers to cause a denial of service panic by triggering a digest operation, as demonstrated by an IPSec connection...

CVE-2013-5165

CVE-2013-5165 concerns Mac OS X before 10.9, where the Application Firewall’s socketfilterfw fails to properly implement the --blockApp option. This allows remote attackers to bypass intended access restrictions by initiating a network connection to an application for which blocking has been conf...

CVE-2013-5177

The kernel in Apple Mac OS X before 10.9 allows local users to cause a denial of service panic via an invalid iovec structure...

CVE-2013-5186

Power Management in Apple Mac OS X before 10.9 does not properly handle the interaction between locking and power assertions, which allows physically proximate attackers to obtain sensitive information by reading a screen that should have transitioned into the locked state...

CVE-2013-5169

CoreGraphics in Apple Mac OS X before 10.9, when display-sleep mode is used, does not ensure that screen locking blocks the visibility of all windows, which allows physically proximate attackers to obtain sensitive information by reading the screen...

CVE-2013-5188

The Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are enabled, does not require a password for a transition out of hibernation, which allows physically proximate attackers to obtain access by visiting an unattended workstation in the hibernating state...

CVE-2013-5191

The CVE-2013-5191 entry describes a local-information-disclosure vulnerability in the syslog implementation of Apple Mac OS X before 10.9. An attacker with access to the Guest account could read console-log messages from previous Guest sessions, revealing sensitive information. The Red Hat entry ...

CVE-2013-5190

This CVE-2013-5190 affects Apple Mac OS X before 10.9, where Smart Card Services fail to properly enforce certificate revocation checks. The result is a denial of service (Smart Card usage outage) when the revocation-check procedure is interfered with. Public details consistently describe the vul...

CVE-2013-5188

The CVE-2013-5188 entry concerns Apple macOS X before 10.9 where, when hibernation and autologin are enabled, the Screen Lock transition out of hibernation does not require a password. This enables physically proximate attackers to gain access by visiting an unattended workstation in a hibernatin...

CVE-2013-5181

Apple Mac OS X Mail’s auto-configuration (pre-10.9) may select plaintext authentication for servers that support CRAM-MD5, enabling remote sniffing of credentials. Affected: OS X Mail before 10.9. Root cause: plaintext auth chosen during auto-config. Impact: potential exposure of sensitive inform...

CVE-2013-5166

CVE-2013-5166 affects Apple Mac OS X before 10.9. The Bluetooth USB host controller prematurely deletes interfaces, enabling local users to cause a denial of service (system crash) via a crafted application. The Red Hat and NVD entries corroborate the same description. No details on patches or fi...

CVE-2013-5189

Apple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting across software updates, which allows context-dependent attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended security configuration after the...

CVE-2013-5167

CVE-2013-5167 concerns CFNetwork in Apple Mac OS X pre-10.9 where Safari’s deletion of session cookies is not properly handled during a reset, enabling remote servers to track users via Set-Cookie headers. Affected: CFNetwork on macOS before 10.9. Root cause: improper cookie deletion handling in ...

CVE-2013-5184

CVE-2013-5184 affects Apple Mac OS X kernels prior to 10.9. The issue is an improper error check when processing multicast Wi‑Fi packets, enabling remote attackers in an 802.11 network’s coverage area to trigger a denial of service (system crash). Public details in the provided documents are limi...

CVE-2013-5181

The auto-configuration feature in Mail in Apple Mac OS X before 10.9 selects plaintext authentication for unspecified servers that support CRAM-MD5 authentication, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2013-5177

CVE-2013-5177 affects Apple Mac OS X before 10.9. The kernel vulnerability allows local users to trigger a denial of service (panic) via an invalid iovec structure. The connected sources confirm the local attack vector and impact, but no remediation or exploit details are provided in the documents.

CVE-2013-5186

CVE-2013-5186 concerns Power Management in Apple Mac OS X before 10.9. The vulnerability arises from improper handling of the interaction between screen locking and power assertions, enabling physically proximate attackers to read sensitive information from a screen that should be locked. The ini...

CVE-2013-5183

Mail in Apple Mac OS X before 10.9, when Kerberos authentication is enabled and TLS is disabled, sends invalid cleartext data, which allows remote attackers to obtain sensitive information by sniffing the network...