The version of Apple iTunes installed on the remote Windows host is prior to 12.11.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT212319 advisory.

  - In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE     before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by     sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation     may result in unintended kernel behaviour including a kernel panic. (CVE-2020-7463)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to 10.15.7 Security Update 2021-002 Catalina It is, therefore, affected by multiple vulnerabilities, including the following:

  - An application may be able to execute arbitrary code with system privileges due to insufficient permission     checks (CVE-2020-3838).

  - A memory corruption vulnerability could allow an application read access to restricted memory (CVE-2021-1808).

  - A memory corruption vulnerability could allow an application to cause unexpected system termination or to     write kernel memory (CVE-2021-1828).

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.3 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

  - A memory corruption issue which could allow an application restricted memory read access (CVE-2021-1808).

  - A memory corruption issue which could allow an application to cause unexpected system termination or to     write kernel memory (CVE-2021-1828).

  - An out-of-bounds wirte issue which could allow a malicious application to execute arbitrary code with     kernel privileges (CVE-2021-1834).

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 14.5. It is, therefore, affected by multiple vulnerabilities.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-003 Mojave It is, therefore, affected by multiple vulnerabilities, including the following:

  - An application may be able to execute arbitrary code with system privileges due to insufficient permission     checks (CVE-2020-3838).

  - A memory corruption vulnerability could allow an application read access to restricted memory (CVE-2021-1808).

  - A memory corruption vulnerability could allow an application to cause unexpected system termination or to     write kernel memory (CVE-2021-1828).

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
149022	Apple iTunes < 12.11.3 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	4/27/2021	9/20/2021	medium
149042	macOS 10.15.x < 10.15.7 Security Update 2021-002 Catalina (HT212326)	Nessus	MacOS X Local Security Checks	4/28/2021	4/25/2023	critical
149041	macOS 11.x < 11.3 (HT212325)	Nessus	MacOS X Local Security Checks	4/28/2021	4/25/2023	critical
149023	Apple iTunes < 12.11.3 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	4/27/2021	9/20/2021	medium
149061	Apple iOS < 14.5 Multiple Vulnerabilities (HT212317)	Nessus	Mobile Devices	4/29/2021	4/8/2024	critical
149043	macOS 10.14.x < 10.14.6 Security Update 2021-003 Mojave (HT212327)	Nessus	MacOS X Local Security Checks	4/28/2021	1/3/2024	critical

Detections

Analytics

Plugins Search

medium

critical

critical

medium

critical

critical