This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to execute arbitrary shell commands.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.4. It is, therefore, affected by multiple vulnerabilities, including:

 - Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges. (CVE-2019-8508)

 - An application may be able to execute arbitrary code with kernel privileges. (CVE-2019-8529)

 - A malicious application may be able to execute arbitrary code with system privileges (CVE-2019-8549)

The remote host is running macOS 10.13.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities including:

  - An application may be able to execute arbitrary code with kernel     privileges. (CVE-2019-8529)

  - A local user may be able to read kernel memory. (CVE-2019-8504)

  - A malicious application may be able to determine kernel memory     layout. (CVE-2019-6207, CVE-2019-8510)

  - 802.1X
  - DiskArbitration
  - Feedback Assistant
  - IOKit
  - IOKit SCSI
  - Kernel
  - PackageKit
  - Perl
  - Security
  - Time Machine
  - Wi-Fi

The remote host is running Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities including:

  - A malicious application may be able to execute arbitrary code     with kernel privileges. (CVE-2019-8555)

  - A malicious application may be able to determine kernel memory     layout. (CVE-2019-6207, CVE-2019-8510)

  - A malicious application may be able to read restricted memory.
    (CVE-2019-8520)

  - 802.1X
  - DiskArbitration
  - Feedback Assistant
  - IOKit
  - IOKit SCSI
  - Kernel
  - PackageKit
  - Perl
  - Security
  - Time Machine
  - Wi-Fi

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.4. It is, therefore, affected by multiple vulnerabilities, including:

  - Mounting a maliciously crafted NFS network share may lead to     arbitrary code execution with system privileges. (CVE-2019-8508)

  - An application may be able to execute arbitrary code with kernel     privileges. (CVE-2019-8529)

  - A malicious application may be able to execute arbitrary code     with system privileges (CVE-2019-8549)

ID	Name	Product	Family	Severity
700522	macOS 10.14.x < 10.14.4 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	critical
123130	macOS 10.13.6 Multiple Vulnerabilities (Security Update 2019-002)	Nessus	MacOS X Local Security Checks	critical
123129	macOS and Mac OS X Multiple Vulnerabilities (Security Update 2019-002)	Nessus	MacOS X Local Security Checks	critical
123128	macOS 10.14.x < 10.14.4 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2019-8513

high

Tenable Plugins

critical

critical

critical

critical