A race condition was addressed with additional validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojave 10.14.6 Security Update 2021-002. An application may be able to execute arbitrary code with kernel privileges.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-003 Mojave It is, therefore, affected by multiple vulnerabilities, including the following:

  - An application may be able to execute arbitrary code with system privileges due to insufficient permission     checks (CVE-2020-3838).

  - A memory corruption vulnerability could allow an application read access to restricted memory (CVE-2021-1808).

  - A memory corruption vulnerability could allow an application to cause unexpected system termination or to     write kernel memory (CVE-2021-1828).

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-002 Mojave, 10.15.x prior to 10.15.7 Supplemental Update Catalina, or 11.x prior to 11.2.1 Big Sur. It is, therefore, affected by multiple vulnerabilities, including the following:

  - An out-of-bounds-write vulnerability caused by insufficient input validation that allows an application     to execute arbitrary code with kernel privileges. (CVE-2021-1805)

  - A race condition due to insufficient validation that allows an application to execute arbitrary code with     kernel privileges. (CVE-2021-1806)

  - A local privilege elevation vulnerability in sudo caused by a heap-based buffer overflow. (CVE-2021-3156)


Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Severity
149043	macOS 10.14.x < 10.14.6 Security Update 2021-003 Mojave (HT212327)	Nessus	MacOS X Local Security Checks	critical
146427	macOS 10.14.x < 10.14.6 Security Update 2021-002 / 10.15.x < 10.15.7 Supplemental Update / macOS 11.x < 11.2.1 (HT212177)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2021-1806

high

Tenable Plugins

critical

high