The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.7.2. It is, therefore, affected by multiple vulnerabilities:

  - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in     macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, iOS 16.7.3 and iPadOS     16.7.3, macOS Monterey 12.7.2. An app may be able to access sensitive user data. (CVE-2023-42919)

  - This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS     Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. An app may be able to access information about a     user's contacts. (CVE-2023-42894)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma     14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. A user may be able to cause unexpected app termination     or arbitrary code execution. (CVE-2023-42886)

  - This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS     Sonoma 14.2, iOS 17.2 and iPadOS 17.2, macOS Ventura 13.6.3, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey     12.7.2. An app may be able to read sensitive location information. (CVE-2023-42922)

  - A privacy issue was addressed with improved handling of files. This issue is fixed in watchOS 10.1, macOS     Sonoma 14.1, macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.1 and iPadOS 17.1. An app may be able to     access sensitive user data. (CVE-2023-42834)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2     and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS     Monterey 12.7.2. Processing an image may lead to arbitrary code execution. (CVE-2023-42899)

  - An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma     14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. An app may be able to monitor keystrokes without user     permission. (CVE-2023-42891)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2     and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS     Monterey 12.7.2. An app may be able to break out of its sandbox. (CVE-2023-42914)

  - A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a     buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.
    (CVE-2023-3618)

  - Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19185)

  - Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19186)

  - Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19187)

  - Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows     remote attackers to cause a denial of service via crafted command. (CVE-2020-19188)

  - Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1     allows remote attackers to cause a denial of service via crafted command. (CVE-2020-19189)

  - Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote     attackers to cause a denial of service via crafted command. (CVE-2020-19190)

  - An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Ventura     13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An app may be able to execute arbitrary code out of its     sandbox or with certain elevated privileges. (CVE-2023-42838)

  - A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS     Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An attacker may be able to access connected     network volumes mounted in the home directory. (CVE-2023-42836)

  - A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura     13.6.3, macOS Monterey 12.7.2. An app may be able to access protected user data. (CVE-2023-42932)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. (CVE-2023-5344)

  - An issue was addressed with improved handling of temporary files. (CVE-2023-42896)

  - The issue was addressed with improved checks. (CVE-2023-42931)

  - A use-after-free issue was addressed with improved memory management. (CVE-2023-42892)

  - A permissions issue was addressed by removing vulnerable code and adding additional checks.
    (CVE-2023-42893)

  - This issue was addressed with improved redaction of sensitive information. (CVE-2023-42936)

  - A path handling issue was addressed with improved validation. (CVE-2023-42947)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

Detections

Analytics

macOS 12.x < 12.7.2 Multiple Vulnerabilities (HT214037)

high Nessus Plugin ID 186730

Version 1.8