This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Mojave 10.14.4. A malicious application may bypass Gatekeeper checks.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.4. It is, therefore, affected by multiple vulnerabilities, including:

 - Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges. (CVE-2019-8508)

 - An application may be able to execute arbitrary code with kernel privileges. (CVE-2019-8529)

 - A malicious application may be able to execute arbitrary code with system privileges (CVE-2019-8549)

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.4. It is, therefore, affected by multiple vulnerabilities, including:

  - Mounting a maliciously crafted NFS network share may lead to     arbitrary code execution with system privileges. (CVE-2019-8508)

  - An application may be able to execute arbitrary code with kernel     privileges. (CVE-2019-8529)

  - A malicious application may be able to execute arbitrary code     with system privileges (CVE-2019-8549)

ID	Name	Product	Family	Type	Severity
700522	macOS 10.14.x < 10.14.4 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection		critical
123128	macOS 10.14.x < 10.14.4 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Combined	critical

Detections

Analytics

CVE-2019-6239

high

Tenable Plugins

critical

critical