The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

  - A use after free issue was addressed with improved memory management. Exploitation of this vulnerability may lead to     arbitrary code execution. (CVE-2021-30858)

  - An integer overflow was addressed with improved input validation. Exploitation of this vulnerability may lead to     arbitrary code execution. (CVE-2021-30860)

  - Insufficient checks when processing maliciously crafted dfont files may lead to arbitrary code     execution. (CVE-2021-30841, CVE-2021-30842, CVE-2021-30843)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

Detections

Analytics

macOS 11.x < 11.6 (HT212804)

high Nessus Plugin ID 153429

Version 1.17

Version 1.16

Version 1.15

Version 1.17 May 28, 2024, 2:57 PM Plugin metadata (Add version information to CPEs) Plugin Feed: 202405281457
Version 1.16 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 1.15 Sep 29, 2022, 12:06 AM CISA reference Plugin Feed: 202209290006