https://support.apple.com/en-us/HT212978

https://support.apple.com/en-us/HT212979

https://support.apple.com/en-us/HT212981

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.1 Monterey. It is, therefore, affected by multiple vulnerabilities including the following:

  - A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted USD     file may lead to unexpected application termination or arbitrary code execution. (CVE-2021-30979)

  - An out-of-bounds read was addressed with improved input validation. Playing a malicious audio file may     lead to arbitrary code execution. (CVE-2021-30958)

  - An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously     crafted USD file may disclose memory contents. (CVE-2021-30929)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6.2 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

  - A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted USD     file may lead to unexpected application termination or arbitrary code execution. (CVE-2021-30979)

  - An out-of-bounds read was addressed with improved input validation. Playing a malicious audio file may     lead to arbitrary code execution. (CVE-2021-30958)

  - An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously     crafted USD file may disclose memory contents. (CVE-2021-30929)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to Catalina Security Update 2021-008 Catalina. It is, therefore, affected by multiple vulnerabilities :

  - A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted USD     file may lead to unexpected application termination or arbitrary code execution. (CVE-2021-30979)

  - An out-of-bounds read was addressed with improved input validation. Playing a malicious audio file may     lead to arbitrary code execution. (CVE-2021-30958)

  - An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously     crafted USD file may disclose memory contents. (CVE-2021-30929)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Severity
156230	macOS 12.x < 12.1 (HT212978)	Nessus	MacOS X Local Security Checks	high
156222	macOS 11.x < 11.6.2 (HT212979)	Nessus	MacOS X Local Security Checks	high
156221	macOS 10.15.x < Catalina Security Update 2021-008 Catalina (HT212981)	Nessus	MacOS X Local Security Checks	high

CVE-2021-30950

medium

Tenable Plugins

high

high

high