libressl was updated to fix two security issues.

These security issues were fixed :

  - CVE-2015-5333: Memory leak when decoding X.509     certificates (boo#950707)

  - CVE-2015-5334: Buffer overflow when decoding X.509     certificates (boo#950708)

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache_mod_php
  - AppSandbox
  - Bluetooth
  - CFNetwork HTTPProtocol
  - Compression
  - Configuration Profiles
  - CoreGraphics
  - CoreMedia Playback
  - Disk Images
  - EFI
  - File Bookmark
  - Hypervisor
  - iBooks
  - ImageIO
  - Intel Graphics Driver
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOKit SCSI
  - IOThunderboltFamily
  - Kernel
  - kext tools
  - Keychain Access
  - libarchive
  - libc
  - libexpat
  - libxml2
  - OpenGL
  - OpenLDAP
  - OpenSSH
  - QuickLook
  - Sandbox
  - Security
  - System Integrity Protection

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The remote host is running a version of Mac OS X that is prior to 10.13.6 or is not macOS 10.14. It is, therefore, affected by multiple vulnerabilities in the following components :

  - afpserver
  - AppleGraphicsControl
  - Application Firewall
  - App Store
  - APR
  - ATS
  - Auto Unlock
  - Bluetooth
  - CFNetwork
  - CoreFoundation
  - CoreText
  - Crash Reporter
  - CUPS
  - Dictionary
  - Grand Central Dispatch
  - Heimdal
  - Hypervisor
  - iBooks
  - Intel Graphics Driver
  - IOHIDFamily
  - IOKit
  - IOUserEthernet
  - Kernel
  - LibreSSL
  - Login Window
  - mDNSOffloadUserClient
  - MediaRemote
  - Microcode
  - Security
  - Spotlight
  - Symptom Framework
  - Text
  - Wi-Fi

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

Qualys reports :

During the code review of OpenSMTPD a memory leak and buffer overflow (an off-by-one, usually stack-based) were discovered in LibreSSL's OBJ_obj2txt() function. This function is called automatically during a TLS handshake (both client-side, unless an anonymous mode is used, and server-side, if client authentication is requested).

The remote host is running a version of Mac OS X 10.9.5 or 10.10.5 that is missing Security Update 2015-005 or 2015-008. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache_mod_php
  - AppSandbox
  - Bluetooth
  - CFNetwork HTTPProtocol
  - Compression
  - Configuration Profiles
  - CoreGraphics
  - CoreMedia Playback
  - Disk Images
  - EFI
  - File Bookmark
  - Hypervisor
  - iBooks
  - ImageIO
  - Intel Graphics Driver
  - IOAcceleratorFamily
  - IOHIDFamily
  - IOKit SCSI
  - IOThunderboltFamily
  - Kernel
  - kext tools
  - Keychain Access
  - libarchive
  - libc
  - libexpat
  - libxml2
  - OpenGL
  - OpenLDAP
  - OpenSSH
  - QuickLook
  - Sandbox
  - Security
  - System Integrity Protection

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The remote host is running a version of Mac OS X that is 10.9.5 or 10.10.5 and is missing Security Update 2016-002. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache_mod_php
  - Kernel
  - libxml2
  - OpenSSH
  - Python
  - Tcl

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

This libressl update to version 2.2.7 fixes the following issues :

Security issues fixed :

  - Fix multiple vulnerabilities in libcrypto relating to     ASN.1 and encoding. [boo#978492, boo#977584]

  - CVE-2015-3194: Certificate verify crash with missing PSS     parameter (boo#957815)

  - CVE-2015-3195: X509_ATTRIBUTE memory leak (boo#957812)

  - CVE-2015-5333: Memory Leak (boo#950707)

  - CVE-2015-5334: Buffer Overflow (boo#950708)

The remote host is running a version of Mac OS X version 10.11.x prior to 10.11.2 and is affected by multiple vulnerabilities in the following components :

 - apache_mod_php
 - AppSandbox
 - Bluetooth
 - CFNetwork HTTPProtocol
 - Compression
 - Configuration Profiles
 - CoreGraphics
 - CoreMedia Playback
 - Disk Images
 - EFI
 - File Bookmark
 - Hypervisor
 - iBooks
 - ImageIO
 - Intel Graphics Driver
 - IOAcceleratorFamily
 - IOHIDFamily
 - IOKit SCSI
 - IOThunderboltFamily
 - Kernel
 - kext tools
 - Keychain Access
 - libarchive
 - libc
 - libexpat
 - libxml2
 - OpenGL
 - OpenLDAP
 - OpenSSH
 - QuickLook
 - Sandbox
 - Security
 - System Integrity Protection

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The remote host is running a version of macOS that is prior to 10.14. It is, therefore, affected by multiple vulnerabilities in the following components :

 - afpserver
 - AppleGraphicsControl
 - Application Firewall
 - App Store
 - APR
 - ATS
 - Auto Unlock
 - Bluetooth
 - CFNetwork
 - CoreFoundation
 - CoreText
 - Crash Reporter
 - CUPS
 - Dictionary
 - Grand Central Dispatch
 - Heimdal
 - Hypervisor
 - iBooks
 - Intel Graphics Driver
 - IOHIDFamily
 - IOKit
 - IOUserEthernet
 - Kernel
 - LibreSSL
 - Login Window
 - mDNSOffloadUserClient
 - MediaRemote
 - Microcode
 - Security
 - Spotlight
 - Symptom Framework
 - Text
 - Wi-Fi

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	Name	Product	Family	Published	Updated	Severity
86622	openSUSE Security Update : libressl (openSUSE-2015-681)	Nessus	SuSE Local Security Checks	10/28/2015	1/19/2021	critical
87314	Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	12/10/2015	5/28/2024	critical
118178	macOS < 10.14 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	10/18/2018	4/25/2023	critical
86434	FreeBSD : LibreSSL -- Memory leak and buffer overflow (e75a96df-73ca-11e5-9b45-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	10/19/2015	1/6/2021	critical
87321	Mac OS X Multiple Vulnerabilities (Security Updates 2015-005 / 2015-008)	Nessus	MacOS X Local Security Checks	12/11/2015	5/28/2024	critical
90097	Mac OS X 10.9.5 / 10.10.5 Multiple Vulnerabilities (Security Update 2016-002)	Nessus	MacOS X Local Security Checks	3/22/2016	5/28/2024	critical
91274	openSUSE Security Update : libressl (openSUSE-2016-604)	Nessus	SuSE Local Security Checks	5/20/2016	1/19/2021	critical
9325	Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	5/27/2016	3/6/2019	critical
700518	macOS < 10.14 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	4/10/2019	4/10/2019	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical