Apple iOS < 8.4.1 Multiple Vulnerabilities

critical Nessus Network Monitor Plugin ID 8978

Synopsis

The remote host is missing a critical Apple iOS patch update.

Description

The remote host is running a version of iOS that is prior to version 8.4.1 and the following components contain vulnerabilities :

 - Air Traffic
- AppleFileConduit
- Backup
- bootp
- CFPreferences
- Certificate UI
- CloudKit
- Code Signing
- CoreMedia Playback
- CoreText
- DiskImages
- FontParser
- IOHIDFamily
- IOKit
- ImageIO
- Kernel
- Libc
- Libinfo
- libpthread
- libxml2
- libxpc
- Location Framework
- MSVDX Driver
- MobileInstallation
- Office Viewer
- QL Office
- Safari
- Sandbox_profiles
- UIKit WebView
- Web
- WebKit

Solution

Upgrade to Apple iOS 8.4.1 or later.

See Also

https://support.apple.com/en-us/HT205030

Plugin Details

Severity: Critical

ID: 8978

Published: 10/14/2015

Updated: 3/6/2019

Nessus ID: 85407

Risk Information

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Patch Publication Date: 8/13/2015

Vulnerability Publication Date: 8/13/2015

Reference Information

CVE: CVE-2014-3660, CVE-2014-0191, CVE-2015-3766, CVE-2015-3768, CVE-2015-3776, CVE-2015-3778, CVE-2015-3782, CVE-2015-3784, CVE-2015-3795, CVE-2015-3796, CVE-2015-3797, CVE-2015-3798, CVE-2015-3800, CVE-2015-3802, CVE-2015-3803, CVE-2015-3804, CVE-2015-3805, CVE-2015-3806, CVE-2015-3807, CVE-2015-5755, CVE-2015-5756, CVE-2015-5757, CVE-2015-5758, CVE-2015-5761, CVE-2015-5773, CVE-2015-5774, CVE-2015-5775, CVE-2015-5776, CVE-2015-5777, CVE-2015-5778, CVE-2015-5781, CVE-2015-5782, CVE-2015-3731, CVE-2015-3741, CVE-2015-3743, CVE-2015-3745, CVE-2015-3747, CVE-2015-3748, CVE-2015-3749, CVE-2015-3752, CVE-2015-3793, CVE-2015-3759, CVE-2015-5749, CVE-2015-3730, CVE-2015-3732, CVE-2015-3733, CVE-2015-3734, CVE-2015-3735, CVE-2015-3736, CVE-2015-3737, CVE-2015-3738, CVE-2015-3739, CVE-2015-3740, CVE-2015-3742, CVE-2015-3744, CVE-2015-3746, CVE-2015-3753, CVE-2015-3750, CVE-2015-3751, CVE-2015-3755, CVE-2015-3729, CVE-2015-5787, CVE-2015-5746, CVE-2015-5766, CVE-2015-5752, CVE-2015-3756, CVE-2015-5770, CVE-2015-5769, CVE-2015-3763, CVE-2015-3758, CVE-2015-5759

BID: 70644, 67233, 76337, 76338, 76341, 76342, 76343, 76344