Mac OS X 10.11.x < 10.11.6 Multiple Vulnerabilities

Critical Nessus Network Monitor Plugin ID 9441

Synopsis

The remote host is missing a critical Mac OS X patch update.

Description

The remote host is running a version of Mac OS X version 10.11.x prior to 10.11.6, and the following components contain vulnerabilities :

- ACMP4AACBaseDecoder
- Audio
- CFNetwork
- CoreGraphics
- DspFuncLib
- FaceTime
- Graphics
- IOHIDFamily
- IOSurface
- ImageIO
- Kernel
- QuickTime
- Safari
- Sandbox
- libxml2

Solution

Upgrade to Mac OS X 10.11.6 or later.

See Also

https://support.apple.com/en-us/HT206902

https://support.apple.com/en-us/HT206903

https://support.apple.com/en-us/HT206904

https://support.apple.com/en-us/HT206905

Plugin Details

Severity: Critical

ID: 9441

Published: 2016/07/29

Updated: 2019/03/06

Dependencies: 4435

Nessus ID: 92496, 93124

Risk Information

Risk Factor: Critical

CVSS v2.0

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

CVSS v3.0

Base Score: 9.8

Temporal Score: 9.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:apple:mac_os_x

Patch Publication Date: 2016/07/18

Vulnerability Publication Date: 2016/07/20

Reference Information

CVE: CVE-2014-9862, CVE-2016-1863, CVE-2016-1865, CVE-2016-4447, CVE-2016-4448, CVE-2016-4449, CVE-2016-4582, CVE-2016-4594, CVE-2016-4595, CVE-2016-4596, CVE-2016-4597, CVE-2016-4598, CVE-2016-4599, CVE-2016-4600, CVE-2016-4601, CVE-2016-4602, CVE-2016-4605, CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, CVE-2016-4610, CVE-2016-4612, CVE-2016-4614, CVE-2016-4615, CVE-2016-4616, CVE-2016-4619, CVE-2016-4625, CVE-2016-4626, CVE-2016-4629, CVE-2016-4630, CVE-2016-4631, CVE-2016-4632, CVE-2016-4633, CVE-2016-4634, CVE-2016-4635, CVE-2016-4637, CVE-2016-4638, CVE-2016-4639, CVE-2016-4640, CVE-2016-4641, CVE-2016-4645, CVE-2016-4646, CVE-2016-4647, CVE-2016-4648, CVE-2016-4649, CVE-2016-4652, CVE-2016-4653, CVE-2016-4642, CVE-2016-4643, CVE-2016-4644, CVE-2016-4655, CVE-2016-4656

BID: 90856, 90865, 90864, 91824, 91826, 91834, 92652, 92653