The remote host is running a version of macOS / Mac OS X that is 15.x prior to the full release of 15.0. It is, therefore, affected by multiple vulnerabilities:

  - This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Sequoia     15. An app may be able to break out of its sandbox. (CVE-2024-44148)

  - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and     libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been     fixed in CUPS version 2.4.7, released in September of 2023. (CVE-2023-4504)

  - Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline     data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a     heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the     affected library. (CVE-2023-5841)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An app may     be able to cause a denial-of-service. (CVE-2024-23237)

  - A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A     camera extension may be able to access the internet. (CVE-2024-27795)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

Detections

Analytics

macOS 15.x < 15.0 Multiple Vulnerabilities (121238)

critical Nessus Plugin ID 213517

Version 1.1