Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable8981.PRM
HistoryOct 16, 2015 - 12:00 a.m.

Mac OS X < 10.10.5 Multiple Vulnerabilities

2015-10-1600:00:00
Tenable
www.tenable.com
63

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.918 High

EPSS

Percentile

98.9%

JSON

The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.5. The installed version is affected by multiple vulnerabilities in the following components :

  • apache (CVE-2014-3581, CVE-2014-3583, CVE-2014-8109, CVE-2015-0228, CVE-2015-0253, CVE-2015-3183, CVE-2015-3185)
  • apache_mod_php (CVE-2015-2783, CVE-2015-2787, CVE-2015-3307, CVE-2015-3329, CVE-2015-3330, CVE-2015-4021, CVE-2015-4022, CVE-2015-4024, CVE-2015-4025, CVE-2015-4026, CVE-2015-4147, CVE-2015-4148)
  • Apple ID OD Plug-in (CVE-2015-3799)
  • AppleGraphicsControl (CVE-2015-5768)
  • Bluetooth (CVE-2015-3777, CVE-2015-3779, CVE-2015-3780, CVE-2015-3786, CVE-2015-3787)
  • bootp (CVE-2015-3778)
  • CloudKit (CVE-2015-3782)
  • CoreMedia Playback (CVE-2015-5777, CVE-2015-5778)
  • CoreText (CVE-2015-5761, CVE-2015-5755)
  • curl (CVE-2014-3613, CVE-2014-3620, CVE-2014-3707, CVE-2014-8150, CVE-2014-8151, CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, CVE-2015-3148, CVE-2015-3153)
  • Data Detectors Engine (CVE-2015-5750)
  • Date & Time pref pane (CVE-2015-3757)
  • Dictionary Application (CVE-2015-3774)
  • DiskImages (CVE-2015-3800)
  • dyld (CVE-2015-3760)
  • FontParser (CVE-2015-3804, CVE-2015-5775, CVE-2015-5756)
  • groff (CVE-2009-5044, CVE-2009-5078)
  • ImageIO (CVE-2015-5758, CVE-2015-5781, CVE-2015-5782)
  • Install Framework Legacy (CVE-2015-5784, CVE-2015-5754)
  • IOFireWireFamily (CVE-2015-3769, CVE-2015-3771, CVE-2015-3772)
  • IOGraphics (CVE-2015-3770, CVE-2015-5783)
  • IOHIDFamily (CVE-2015-5774)
  • Kernel (CVE-2015-3766, CVE-2015-3768, CVE-2015-5747, CVE-2015-5748, CVE-2015-3806, CVE-2015-3803, CVE-2015-3802, CVE-2015-3805, CVE-2015-3776, CVE-2015-3761)
  • Libc (CVE-2015-3796, CVE-2015-3797, CVE-2015-3798)
  • Libinfo (CVE-2015-5776)
  • libpthread (CVE-2015-5757)
  • libxml2 (CVE-2014-0191, CVE-2014-3660, CVE-2015-3807)
  • libxpc (CVE-2015-3795)
  • mail_cmds (CVE-2014-7844)
  • Notification Center OSX (CVE-2015-3764)
  • ntfs (CVE-2015-5763)
  • OpenSSH (CVE-2015-5600)
  • OpenSSL (CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792)
  • perl (CVE-2013-7422)
  • PostgreSQL (CVE-2014-0067, CVE-2014-8161, CVE-2015-0241, CVE-2015-0242, CVE-2015-0243, CVE-2015-0244)
  • python (CVE-2013-7040, CVE-2013-7338, CVE-2014-1912, CVE-2014-7185, CVE-2014-9365)
  • QL Office (CVE-2015-5773, CVE-2015-3784)
  • Quartz Composer Framework (CVE-2015-5771)
  • Quick Look (CVE-2015-3781)
  • QuickTime 7 (CVE-2015-3779, CVE-2015-5753, CVE-2015-5779, CVE-2015-3765, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751)
  • SceneKit (CVE-2015-5772, CVE-2015-3783)
  • Security (CVE-2015-3775)
  • SMBClient (CVE-2015-3773)
  • Speech UI (CVE-2015-3794)
  • sudo (CVE-2013-1775, CVE-2013-1776, CVE-2013-2776, CVE-2013-2777, CVE-2014-0106, CVE-2014-9680)
  • tcpdump (CVE-2014-8767, CVE-2014-8769, CVE-2014-9140)
  • Text Formats (CVE-2015-3762)
  • udf (CVE-2015-3767)

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

Binary data 8981.prm
VendorProductVersionCPE
applemac_os_xcpe:/o:apple:mac_os_x

References

Related

securityvulns 9
openvas 43
nessus 57
cve 10
cvelist 10
nvd 10
prion 10
fedora 5
osv 3
amazon 3
debian 3
ibm 7
kaspersky 2
centos 3
mageia 2
freebsd 1
veracode 4
oraclelinux 4
redhat 5
threatpost 1
gentoo 1
slackware 2
ubuntu 2
archlinux 1
apple 1
securityvulns
securityvulns
Apple Mac OS X / OS X Server multiple security vulnerabilities
2015-08-17 00:00:00
APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006
2015-08-17 00:00:00
[SECURITY] [DSA 3280-1] php5 security update
2015-06-08 00:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-03 (Oct 2015)
2015-10-29 00:00:00
Fedora Update for mingw-curl FEDORA-2015-6853
2015-05-05 00:00:00
Juniper Networks Junos OS Multiple cURL and libcurl Vulnerabilities
2016-05-07 00:00:00
nessus
nessus
Mac OS X 10.10.x < 10.10.5 Multiple Vulnerabilities
2015-08-17 00:00:00
Debian DSA-3280-1 : php5 - security update
2015-06-09 00:00:00
PostgreSQL 9.0 < 9.0.19 / 9.1 < 9.1.15 / 9.2 < 9.2.10 / 9.3 < 9.3.6 / 9.4 < 9.4.1 Multiple Vulnerabilities
2015-02-11 00:00:00
cve
cve
CVE-2015-5779
2015-08-17 00:01:04
CVE-2015-3779
2015-08-16 23:59:52
CVE-2015-3791
2015-08-17 00:00:04
cvelist
cvelist
CVE-2015-3791
2015-08-16 23:00:00
CVE-2015-3779
2015-08-16 23:00:00
CVE-2015-3790
2015-08-16 23:00:00
nvd
nvd
CVE-2015-3765
2015-08-16 23:59:38
CVE-2015-3790
2015-08-17 00:00:02
CVE-2015-5779
2015-08-17 00:01:04
prion
prion
Memory corruption
2015-08-17 00:00:00
Memory corruption
2015-08-17 00:00:00
Memory corruption
2015-08-17 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-curl-7.42.0-1.fc21
2015-05-04 15:28:35
[SECURITY] Fedora 21 Update: httpd-2.4.16-1.fc21
2015-07-30 00:52:03
[SECURITY] Fedora 21 Update: curl-7.37.0-14.fc21
2015-05-02 18:11:42
osv
osv
php5 - security update
2015-06-07 00:00:00
postgresql-9.1 - security update
2015-02-06 00:00:00
postgresql-8.4 - new minor release
2015-02-12 00:00:00
amazon
amazon
Medium: postgresql92
2015-03-13 02:37:00
Medium: php55
2015-06-02 22:21:00
Medium: postgresql8
2015-04-15 21:47:00
debian
debian
[SECURITY] [DSA 3280-1] php5 security update
2015-06-07 17:06:52
[SECURITY] [DLA-152-1] postgresql-8.4 update
2015-02-12 11:10:32
[SECURITY] [DSA 3155-1] postgresql-9.1 security update
2015-02-06 13:30:32
ibm
ibm
Security Bulletin: Vulnerabilities in curl affect IBM Security Network Intrusion Prevention System
2022-02-23 19:48:26
Security Bulletin: Vulnerabilities in curl affect Power Hardware Management Console (CVE-2015-3143 CVE-2015-3148 CVE-2015-3153 CVE-2014-3613 CVE-2014-3707 CVE-2014-8150)
2021-09-23 01:31:39
Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM)
2018-06-18 01:30:20
kaspersky
kaspersky
KLA10653 Code execution vulnerability in QuickTime
2015-05-18 00:00:00
KLA10640 Multiple vulnerabilities in Apache HTTP Server
2015-07-21 00:00:00
centos
centos
curl, libcurl security update
2015-11-30 19:26:37
curl, libcurl security update
2015-07-26 14:12:23
postgresql security update
2015-03-30 13:25:17
mageia
mageia
Updated php packages fix security vulnerabilities
2015-05-18 22:08:05
Updated postgresql packages fix security vulnerabilities
2015-02-17 21:38:13
freebsd
freebsd
PostgreSQL -- multiple buffer overflows and memory issues
2015-02-05 00:00:00
veracode
veracode
CRLF Injection
2019-05-02 05:40:50
Denial Of Service (DoS)
2019-05-02 05:18:03
SQL Injection
2019-05-02 05:12:40
oraclelinux
oraclelinux
curl security, bug fix, and enhancement update
2015-11-23 00:00:00
curl security, bug fix, and enhancement update
2015-07-28 00:00:00
sudo security and bug fix update
2013-10-02 00:00:00
redhat
redhat
(RHSA-2015:1254) Moderate: curl security, bug fix, and enhancement update
2015-07-22 05:29:46
(RHSA-2015:2159) Moderate: curl security, bug fix, and enhancement update
2015-11-19 14:41:12
(RHSA-2015:0750) Moderate: postgresql security update
2015-03-30 00:00:00
threatpost
threatpost
August 2015 Apple QuickTime Security Patches
2015-08-21 09:34:29
gentoo
gentoo
sudo: Privilege escalation
2014-01-21 00:00:00
slackware
slackware
[slackware-security] openssl
2015-06-11 23:01:09
[slackware-security] httpd
2015-07-17 20:25:06
ubuntu
ubuntu
curl vulnerabilities
2015-04-30 00:00:00
PostgreSQL vulnerabilities
2015-02-11 00:00:00
archlinux
archlinux
postgresql: multiple issues
2015-02-06 00:00:00
apple
apple
About the security content of Apple TV 7.2.1 - Apple Support
2017-01-23 03:54:31

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.918 High

EPSS

Percentile

98.9%

JSON
Related for 8981.PRM
securityvulns9openvas43nessus57cve10cvelist10nvd10prion10fedora5osv3amazon3debian3ibm7kaspersky2centos3mageia2freebsd1veracode4oraclelinux4redhat5threatpost1gentoo1slackware2ubuntu2archlinux1apple1