Detections
Analytics
macOS 10.14.x < 10.14.4 Multiple Vulnerabilities
critical Nessus Network Monitor Plugin ID 700522
Synopsis
The remote host is missing a macOS update that fixes multiple security vulnerabilities.Description
The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.4. It is, therefore, affected by multiple vulnerabilities, including:- Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges. (CVE-2019-8508)
- An application may be able to execute arbitrary code with kernel privileges. (CVE-2019-8529)
- A malicious application may be able to execute arbitrary code with system privileges (CVE-2019-8549)
Solution
Upgrade to macOS version 10.14.4 or later.See Also
Plugin Details
Severity: Critical
ID: 700522
Family: Operating System Detection
Published: 4/10/2019
Updated: 4/10/2019
Nessus ID: 123128
Risk Information
VPR
Risk Factor: Critical
Score: 9.4
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: Critical
Base Score: 9.6
Temporal Score: 8.6
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:apple:mac_os_x
Patch Publication Date: 3/25/2019
Vulnerability Publication Date: 3/25/2019
Reference Information
CVE: CVE-2018-12015, CVE-2018-18311, CVE-2018-18313, CVE-2019-6207, CVE-2019-6237, CVE-2019-6239, CVE-2019-7293, CVE-2019-8502, CVE-2019-8504, CVE-2019-8507, CVE-2019-8508, CVE-2019-8510, CVE-2019-8511, CVE-2019-8513, CVE-2019-8514, CVE-2019-8516, CVE-2019-8517, CVE-2019-8519, CVE-2019-8520, CVE-2019-8521, CVE-2019-8522, CVE-2019-8526, CVE-2019-8527, CVE-2019-8529, CVE-2019-8530, CVE-2019-8533, CVE-2019-8537, CVE-2019-8540, CVE-2019-8542, CVE-2019-8545, CVE-2019-8546, CVE-2019-8549, CVE-2019-8550, CVE-2019-8552, CVE-2019-8555, CVE-2019-8561, CVE-2019-8565