Detections
Analytics

Apple iOS < 9.0 Multiple Vulnerabilities

critical Nessus Network Monitor Plugin ID 8979

Synopsis

The remote host is missing a critical Apple iOS patch update.

Description

The remote host is running a version of iOS that is prior to version 9.0 and the following components contain vulnerabilities :

 - Apple Pay
- AppleKeyStore
- Application Store
- Audio
- Certificate Trust Policy
- CFNetwork
- CFNetwork Cookies
- CFNetwork FTPProtocol
- CFNetwork Proxies
- CFNetwork SSL
- CoreAnimation
- CoreCrypto
- CoreText
- Data Detectors Engine
- Dev Tools
- Disk Images
- dyld
- Game Center
- ICU
- IOAcceleratorFamily
- IOHIDFamily
- IOKit
- IOMobileFrameBuffer
- IOStorageFamily
- iTunes Store
- JavaScriptCore
- Kernel
- libc
- libpthread
- Mail
- Multipeer Connectivity
- NetworkExtension
- OpenSSL
- PluginKit
- removefile
- Safari
- Safari Safe Browsing
- Security
- Siri
- SpringBoard
- SQLite
- tidy
- WebKit
- WebKit Canvas
- WebKit Page Loading

Solution

Upgrade to Apple iOS 9.0 or later.

See Also

https://support.apple.com/en-us/HT205212

Plugin Details

Severity: Critical

ID: 8979

Published: 10/15/2015

Updated: 3/6/2019

Nessus ID: 85987

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:apple:iphone_os

Patch Publication Date: 8/13/2015

Vulnerability Publication Date: 8/13/2015

Reference Information

CVE: CVE-2013-3951, CVE-2014-8146, CVE-2014-8147, CVE-2014-8611, CVE-2015-0286, CVE-2015-0287, CVE-2015-1129, CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-3801, CVE-2015-5522, CVE-2015-5523, CVE-2015-5748, CVE-2015-5764, CVE-2015-5765, CVE-2015-5767, CVE-2015-5788, CVE-2015-5789, CVE-2015-5790, CVE-2015-5791, CVE-2015-5792, CVE-2015-5793, CVE-2015-5794, CVE-2015-5795, CVE-2015-5796, CVE-2015-5797, CVE-2015-5799, CVE-2015-5800, CVE-2015-5801, CVE-2015-5802, CVE-2015-5803, CVE-2015-5804, CVE-2015-5805, CVE-2015-5806, CVE-2015-5807, CVE-2015-5809, CVE-2015-5810, CVE-2015-5811, CVE-2015-5812, CVE-2015-5813, CVE-2015-5814, CVE-2015-5816, CVE-2015-5817, CVE-2015-5818, CVE-2015-5819, CVE-2015-5820, CVE-2015-5821, CVE-2015-5822, CVE-2015-5823, CVE-2015-5824, CVE-2015-5825, CVE-2015-5826, CVE-2015-5827, CVE-2015-5829, CVE-2015-5831, CVE-2015-5832, CVE-2015-5834, CVE-2015-5835, CVE-2015-5837, CVE-2015-5838, CVE-2015-5839, CVE-2015-5840, CVE-2015-5841, CVE-2015-5842, CVE-2015-5843, CVE-2015-5844, CVE-2015-5845, CVE-2015-5846, CVE-2015-5847, CVE-2015-5848, CVE-2015-5850, CVE-2015-5851, CVE-2015-5855, CVE-2015-5856, CVE-2015-5857, CVE-2015-5858, CVE-2015-5860, CVE-2015-5861, CVE-2015-5862, CVE-2015-5863, CVE-2015-5867, CVE-2015-5868, CVE-2015-5869, CVE-2015-5874, CVE-2015-5876, CVE-2015-5879, CVE-2015-5880, CVE-2015-5882, CVE-2015-5885, CVE-2015-5892, CVE-2015-5896, CVE-2015-5898, CVE-2015-5899, CVE-2015-5903, CVE-2015-5904, CVE-2015-5905, CVE-2015-5906, CVE-2015-5907, CVE-2015-5912, CVE-2015-5916, CVE-2015-5921, CVE-2015-5922

BID: 74457, 73225, 73227, 75037, 76766, 76763, 76764, 60440, 71621, 73976