Mac OS X Multiple EFI Vulnerabilities (EFI Security Update 2015-001)

Low Nessus Plugin ID 84565


The remote host is affected by multiple vulnerabilities.


The remote Mac OS X host is running EFI firmware that is affected by multiple vulnerabilities :

- An insufficient locking issue exists, when resuming from sleep states, which allows a local attacker to write to the EFI flash memory by using an crafted application with root privileges. (CVE-2015-3692)

- A flaw exists due to lax restrictions on memory refresh rates, which allows a specially crafted process to corrupt the memory of some DDR3 SDRAM devices by inducing bit flips in page table entries (PTEs), also known as a 'row-hammer attack'. An attacker can exploit this to gain elevated privileges by manipulating the PTEs. (CVE-2015-3693)


Install Mac EFI Security Update 2015-001.

See Also

Plugin Details

Severity: Low

ID: 84565

File Name: macosx_SecUpdEFI2015-001.nasl

Version: 1.3

Type: local

Agent: macosx

Published: 2015/07/07

Modified: 2017/05/30

Dependencies: 12634

Risk Information

Risk Factor: Low


Base Score: 1.7

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:P/A:N

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x

Required KB Items: Host/local_checks_enabled, Host/MacOSX/Version, Host/MacOSX/packages/boms

Patch Publication Date: 2015/06/30

Vulnerability Publication Date: 2014/06/14

Reference Information

CVE: CVE-2015-3692, CVE-2015-3693

BID: 74971

OSVDB: 119442, 123934

APPLE-SA: APPLE-SA-2015-06-30-3