遠端主機執行的 Mac OS X 10.11.x 版比 10.11.6 版舊。因此受到下列元件中的多個弱點影響：

- apache_mod_php
 - Audio
 - bsdiff
 - CFNetwork
 - CoreGraphics
 - FaceTime
 - Graphics Drivers
 - ImageIO
 - Intel Graphics Driver
 - IOHIDFamily
 - IOKit
 - IOSurface
 - Kernel
 - libc++abi
 - libexpat
 - LibreSSL
 - libxml2
 - libxslt
 - Login Window
 - OpenSSL
 - QuickTime
 - Safari Login AutoFill
 - Sandbox Profiles

請注意，如果成功惡意利用多數嚴重問題，將會導致任意程式碼執行。

此更新會將 libxml2 升級至 2.9.4 版。

已修正這些安全性問題：

- CVE-2016-3627：在復原模式中使用時，tree.c 中的 xmlStringGetNodeList 函式會允許內容相依的攻擊者透過特製的 XML 文件來造成拒絕服務 (無限遞迴、堆疊消耗及應用程式損毀) (bsc#972335)。

- CVE-2016-1833：libxml2 允許遠端攻擊者透過特製的 XML 文件來執行任意程式碼或造成拒絕服務 (記憶體損毀)，此弱點與 CVE-2016-1834、CVE-2016-1836、CVE-2016-1837、CVE-2016-1838、CVE-2016-1839 和 CVE-2016-1840 不同 (bsc#981108)。

- CVE-2016-1835：libxml2 允許遠端攻擊者透過特製的 XML 文件來執行任意程式碼或造成拒絕服務 (記憶體損毀) (bsc#981109)。

- CVE-2016-1837：libxml2 允許遠端攻擊者透過特製的 XML 文件來執行任意程式碼或造成拒絕服務 (記憶體損毀)，此弱點與 CVE-2016-1833、CVE-2016-1834、CVE-2016-1836、CVE-2016-1838、CVE-2016-1839 和 CVE-2016-1840 不同 (bsc#981111)。

- CVE-2016-1836：libxml2 允許遠端攻擊者透過特製的 XML 文件來執行任意程式碼或造成拒絕服務 (記憶體損毀)，此弱點與 CVE-2016-1833、CVE-2016-1834、CVE-2016-1837、CVE-2016-1838、CVE-2016-1839 和 CVE-2016-1840 不同 (bsc#981110)。

- CVE-2016-1839：libxml2 允許遠端攻擊者透過特製的 XML 文件來執行任意程式碼或造成拒絕服務 (記憶體損毀)，此弱點與 CVE-2016-1833、CVE-2016-1834、CVE-2016-1836、CVE-2016-1837、CVE-2016-1838 和 CVE-2016-1840 不同 (bsc#981114)。

- CVE-2016-1838：libxml2 允許遠端攻擊者透過特製的 XML 文件來執行任意程式碼或造成拒絕服務 (記憶體損毀)，此弱點與 CVE-2016-1833、CVE-2016-1834、CVE-2016-1836、CVE-2016-1837、CVE-2016-1839 和 CVE-2016-1840 不同 (bsc#981112)。

- CVE-2016-1840：libxml2 允許遠端攻擊者透過特製的 XML 文件來執行任意程式碼或造成拒絕服務 (記憶體損毀)，此弱點與 CVE-2016-1833、CVE-2016-1834、CVE-2016-1836、CVE-2016-1837、CVE-2016-1838 和 CVE-2016-1839 不同 (bsc#981115)。

- CVE-2016-4483：使用復原模式剖析 XML 時發生超出邊界讀取 (bnc#978395)。

- CVE-2016-1834：libxml2 允許遠端攻擊者透過特製的 XML 文件來執行任意程式碼或造成拒絕服務 (記憶體損毀)，此弱點與 CVE-2016-1833、CVE-2016-1836、CVE-2016-1837、CVE-2016-1838、CVE-2016-1839 和 CVE-2016-1840 不同 (bsc#981041)。

- CVE-2016-3705：在 libxml2 中，parser.c 中的 (1) xmlParserEntityCheck 和 (2) xmlParseAttValueComplex 函式未正確追蹤遞迴深度，其允許內容相依的攻擊者透過含有大量巢狀項目參照的特製 XML 文件，來造成拒絕服務 (堆疊消耗和應用程式損毀) (bsc#975947)。

- CVE-2016-1762：libxml2 允許遠端攻擊者透過特製的 XML 文件來執行任意程式碼或造成拒絕服務 (記憶體損毀) (bsc#981040)。

已修正此非安全性問題：

- bnc#983288：修正 XML 配置驗證期間的屬性編碼問題

遠端 OracleVM 系統缺少可解決重要安全性更新的必要修補程式：

- 更新 tarball 中的 doc/redhat.gif

- 在 tarball 中新增 libxml2-oracle-enterprise.patch 並更新標誌

- xmlNextChar 中的堆積型緩衝區過度讀取 (CVE-2016-1762)

- 錯誤 763071：xmlStrncat 中的堆積緩衝區溢位 (CVE-2016-1834)

- 錯誤 757711：xmlFAParsePosCharGroup 中的堆積緩衝區溢位 (CVE-2016-1840)

- 錯誤 758588：xmlParserPrintFileContextInternal 中的堆積型緩衝區過度讀取 (CVE-2016-1838)

- 錯誤 758605：xmlDictAddString 中的堆積型緩衝區過度讀取 (CVE-2016-1839)

- 錯誤 759398：xmlDictComputeFastKey 中的堆積釋放後使用 (CVE-2016-1836)

- 修正不當擷取實體內容的問題 (CVE-2016-4449)

- htmlParsePubidLiteral 和 htmlParseSystemiteral 中的堆積釋放後使用 (CVE-2016-1837)

- xmlSAX2AttributeNs 中的堆積釋放後使用 (CVE-2016-1835)

- xmlParseName 導致的堆積型緩衝區讀取不足 (CVE-2016-4447)

- htmlCurrentChar 中的堆積型緩衝區過度讀取 (CVE-2016-1833)

- 為 XML 剖析器新增遺漏的遞迴深度計數器遞增。(CVE-2016-3705)

- 避免構建遞迴實體 (CVE-2016-3627)

- 修正某些具有潛在格式字串弱點的格式字串警告 (CVE-2016-4448)

- 更多具有潛在格式字串弱點的格式字串警告 (CVE-2016-4448)

- 修正來自記憶體的檔案大型剖析 (rhbz#862969)

遠端主機上安裝的 Tenable Log Correlation Engine (LCE) 版本比 4.8.1 舊。因此，會受到以下弱點影響：- Handlebars 程式庫的 lib/handlebars/utils.js 指令碼中，有多個跨網站指令碼 (XSS) 弱點存在，這是因為將取消引用的屬性傳送至範本時，未正確逸出輸入所致。未經驗證的遠端攻擊者可惡意利用這些弱點，透過特製要求在使用者的瀏覽器工作階段內執行任意指令碼。(CVE-2015-8861、CVE-2015-8862) - Perl-Compatible Regular Expressions (PCRE) 元件中有堆積型緩衝區溢位情形存在，會在處理重複命名群組中的巢狀向後參照時遭到觸發。未經驗證的遠端攻擊者可加以惡意利用，藉此引發拒絕服務情形或執行任意程式碼。(CVE-2016-1283) - 在 libxml2 元件的 parserInternals.c 中有一個超出邊界讀取錯誤存在，這是因為不當剖析 XML 檔案中的字元所致。未經驗證的遠端攻擊者可惡意利用此弱點，洩露敏感資訊或造成拒絕服務情形。(CVE-2016-1833) - 在 libxml2 元件的 xmlstring.c 中有溢位情形存在，這是因為在處理含有 NULL 的字串時，不當驗證使用者提供的輸入所致。未經驗證的遠端攻擊者可惡意利用此問題，透過特製的檔案，造成拒絕服務情形，或是執行任意程式碼。(CVE-2016-1834) - 在 libxml2 元件的 parser.c 中有多個釋放後使用錯誤存在，會在剖析複雜名稱時遭到觸發。未經驗證的遠端攻擊者可加以惡意利用，透過特製的檔案解除參照已釋放的記憶體，甚或執行任意程式碼。(CVE-2016-1835, CVE-2016-1836) - 在 libxml2 元件的 HTMLparser.c 及 xmlregexp.c 中有多個堆積型緩衝區溢位情形存在，這是因為剖析某個範圍內的字元時，不當驗證使用者提供的輸入所致。未經驗證的遠端攻擊者可利用這些問題，透過特製的網頁，引發拒絕服務情形，或是執行任意程式碼。(CVE-2016-1837、CVE-2016-1839、CVE-2016-1840) - 在 libxml2 元件的 parser.c 的 中有多個超出邊界讀取錯誤存在。未經驗證的遠端攻擊者可惡意利用這些問題，以洩露敏感資訊或造成拒絕服務情形。(CVE-2016-1838、CVE-2016-4447) - 在 OpenSSL 元件中，檔案 crypto/evp/encode.c 內的 EVP_EncodeUpdate() 函式內有堆積緩衝區溢位情形存在，會在處理大量輸入資料時遭到觸發。未經驗證的遠端攻擊者可加以惡意利用，進而引發拒絕服務情形。(CVE-2016-2105) - OpenSSL 元件中 crypto/evp/evp_enc.c 檔案內的 EVP_EncryptUpdate() 函式中存在堆積緩衝區溢位情形，含有部分區塊的相同函式發生上一次呼叫後，會在處理大量輸入資料時遭到觸發。未經驗證的遠端攻擊者可加以惡意利用，進而引發拒絕服務情形。(CVE-2016-2106) - crypto/evp/e_aes_cbc_hmac_sha1.c 檔案中的 aesni_cbc_hmac_sha1_cipher() 函式和 crypto/evp/e_aes_cbc_hmac_sha256.c 檔案中的 aesni_cbc_hmac_sha256_cipher() 函式有多個缺陷存在，連線使用伺服器支援的 AES-CBC 密碼和 AES-NI 時，會觸發這些缺陷。攔截式攻擊者可惡意利用這些弱點，發動 padding oracle 攻擊，進而解密網路流量。(CVE-2016-2107) - 在 OpenSSL 元件中，ASN.1 編碼器有一個遠端程式碼執行弱點存在，此弱點是因為嘗試編碼以負整數表示的零值時，發生反向溢位情形所致。未經驗證的遠端攻擊者可惡意利用此弱點損毀記憶體，進而導致任意程式碼執行。(CVE-2016-2108) - d2i BIO 函式從 BIO 讀取 ASN.1 資料時存在多個不明缺陷，這是因為無效編碼造成配置大量記憶體所致。未經驗證的遠端攻擊者可惡意利用這些缺陷，透過資源耗盡造成拒絕服務情形。(CVE-2016-2109) - 檔案 crypto/x509/x509_obj.c 的 X509_NAME_oneline() 函式處理極長的 ASN1 字串時，有一個超出邊界讀取錯誤存在。未經驗證的遠端攻擊者可加以惡意利用洩露堆疊記憶體的內容。(CVE-2016-2176) - Perl-Compatible Regular Expressions (PCRE) 元件中有溢位情形存在，這是因為在處理 (*ACCEPT) 動詞命令時，不當驗證使用者提供的輸入所致。未經驗證的遠端攻擊者可加以惡意利用，藉此引發拒絕服務情形或執行任意程式碼。(CVE-2016-3191) - 以復原模式處理 XML 內容時，libxml2 元件的 parser.c 中有一個缺陷存在。未經驗證的遠端攻擊者可加以惡意利用，造成堆疊耗盡，進而導致拒絕服務情形。(CVE-2016-3627) - libxml2 元件的 parser.c 中有一個缺陷存在，這是因為不當驗證使用者提供的輸入所致。未經驗證的遠端攻擊者可加以惡意利用，造成堆疊耗盡，進而導致拒絕服務情形。(CVE-2016-3705) - libxml2 元件中有一個格式字串缺陷存在，這是因為不當使用字串格式指定名稱 (例如，%s 和 %x) 所致。未經驗證的遠端攻擊者可加以惡意利用，藉此引發拒絕服務情形或執行任意程式碼。(CVE-2016-4448) - parser.c 中有一個 XML 外部實體插入弱點存在，這是因為不當剖析 XML 資料所致。未經驗證的遠端攻擊者可加以惡意利用，透過特製 XML 資料洩露任意檔案，或是造成拒絕服務情形。(CVE-2016-4449) - 以復原模式處理 XML 內容時，libxml2 的 xmlsave.c 元件中有一個超出邊界讀取錯誤存在。未經驗證的遠端攻擊者可惡意利用此弱點，洩露敏感資訊或造成拒絕服務情形。(CVE-2016-4483) - libcurl 元件中有一個安全性繞過弱點存在，這是因為即使用戶端憑證失敗，程式還是會嘗試恢復 TLS 工作階段所致。未經驗證的遠端攻擊者可加以惡意利用，繞過驗證機制。(CVE-2016-5419) - libcurl 元件中有一個資訊洩露弱點存在，這是因為程式重複使用具有不同用戶端憑證的 TLS 連線所致。未經驗證的遠端攻擊者可惡意利用此弱點洩露敏感的跨領域資訊。(CVE-2016-5420) - libcurl 元件中有一個釋放後使用錯誤存在，會在未正確清除連線指標以便處理時遭到觸發。未經驗證的遠端攻擊者可加以惡意利用，解除參照已釋放的記憶體，進而可能導致執行任意程式碼。(CVE-2016-5421) - 有多個已儲存跨網站指令碼 (XSS) 弱點存在，這是因不當驗證使用者提供的輸入所致。經驗證的遠端攻擊者可加以惡意利用，透過特製的要求，在使用者的瀏覽器工作階段中執行任意指令碼。(CVE-2016-9261)

The remote host is running a version of iOS that is prior to version 9.3.2 and the following components contain vulnerabilities :

 - Accessibility
 - CFNetwork Proxies
 - CommonCrypto
 - CoreCapture
 - Disk Images
 - ImageIO
 - IOAcceleratorFamily
 - IOHIDFamily
 - Kernel
 - libc
 - libxml2
 - libxslt
 - MapKit
 - OpenGL
 - Safari
 - Siri
 - WebKit
 - WebKit Canvas

Versions of Apple TV earlier than 9.2.1 are unpatched for vulnerabilities in the following components :

 - CFNetwork Proxies
 - CommonCrypto
 - CoreCapture
 - Disk Images
 - ImageIO
 - IOAcceleratorFamily
 - IOHIDFamily
 - Kernel
 - libc
 - libxml2
 - libxslt
 - OpenGL
 - WebKit
 - WebKit Canvas
 

The remote host is running a version of Mac OS X version 10.11.x prior to 10.11.5 and is affected by multiple vulnerabilities in the following components :

 - AMD
 - apache_mod_php
 - AppleGraphicsControl
 - AppleGraphicsPowerManagement
 - ATS
 - Audio
 - Captive Network Assistant
 - CFNetwork Proxies
 - CommonCrypto
 - CoreCapture
 - CoreStorage
 - Crash Reporter
 - Disk Images
 - Disk Utility
 - Graphics Drivers
 - ImageIO
 - Intel Graphics Driver
 - IOAcceleratorFamily
 - IOAudioFamily
 - IOFireWireFamily
 - IOHIDFamilyKernel
 - libc
 - libxml2
 - libxslt
 - MapKit
 - Messages
 - Multi-Touch
 - NVIDIA Graphics Drivers
 - OpenGL
 - QuickTime
 - SceneKit
 - Screen Lock
 - Tcl

The specific version of Mac OS X that the system is running is reportedly affected by the following vulnerabilities:

- Apple Mac OS X contains a use-after-free error in the WindowServer process that is triggered when handling CFData objects in memory. This may allow a local attacker to dereference already freed memory and gain elevated privileges. (CVE-2016-1804)

- Apple Mac OS X contains an array indexing flaw in the blit3d_submit_commands() function within the IOAcceleratorFamily component. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1815)

- Multiple Apple products contains a flaw as HTTP and HTTPS requests are not properly handled. This may allow an attacker with the ability to intercept network traffic (e.g. MitM, DNS cache poisoning) to disclose transmitted data. (CVE-2016-1801)

- Multiple Apple products contain a flaw that is triggered when handling return values related to key lengths in CommonCrypto (CCCrypt). This may allow a local attacker to gain unauthorized access to sensitive user information. (CVE-2016-1802)

- Multiple Apple products contain a NULL pointer dereference flaw in CoreCapture that is triggered as input is not properly validated. This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1803)

- Multiple Apple products contain a flaw related to disk images that is triggered by a race condition related to locking. This may allow a local attacker to gain unauthorized access to kernel memory information. (CVE-2016-1807)

- Multiple Apple products contain a flaw that is triggered as user-supplied input is not properly validated when handling disk images. This may allow a local attacker to corrupt memory to cause a denial of service or potentially execute arbitrary code. (CVE-2016-1808)

- Multiple Apple products contain a NULL pointer dereference flaw in ImageIO that is triggered when handling a specially crafted image. This may allow a context-dependent attacker to cause a denial of service. (CVE-2016-1811)

- Multiple Apple products contain an overflow condition in the IOAcceleratorFamily component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a buffer overflow and potentially execute arbitrary code with kernel privileges. (CVE-2016-1817)

- Multiple Apple products contains a flaw in the IOAcceleratorFamily component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1818)

- Multiple Apple products contain a use-after-free condition in the IOAcceleratorFamily component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to dereference already freed memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1819)

- Multiple Apple products contain a NULL pointer dereference in IOAcceleratorFamily related to improper locking. This may allow a local attacker to cause a denial of service. (CVE-2016-1814)

- Multiple Apple products contain a NULL pointer dereference in the IOAccelSharedUserClient2::page_off_resource() function that is triggered as user-supplied input is not properly sanitized. This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1813)

- Multiple Apple products contains an out-of-bounds access flaw in the IOHIDFamily component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1823)

- Multiple Apple products contains a flaw in the IOHIDFamily component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory to cause a denial of service or potentially execute arbitrary code with kernel privileges. (CVE-2016-1824)

- Multiple Apple products contain a flaw in the kernel. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code with kernel privileges. (CVE-2016-1827, CVE-2016-1828, CVE-2016-1829, CVE-2016-1830, CVE-2016-1831)

- Multiple Apple products contains a flaw in libc. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-1832)

- Libxml2 contains an overflow condition in the xmlStrncatNew() function of xmlstring.c . The issue is triggered as user-supplied input is not properly validated when handling a string with a NULL. With a specially crafted file, a context-dependent attacker can cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. (CVE-2016-1834)

- Libxml2 contains a use-after-free error in the xmlParseStartTag2() function of parser.c. The issue is triggered when parsing complex names. With a specially crafted file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code. (CVE-2016-1835)

- Libxml2 contains a use-after-free error in the xmlParseNCNameComplex() function of parser.c. The issue is triggered when parsing complex names. With a specially crafted file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code. (CVE-2016-1836)

- Libxml2 contains an overflow condition in the htmlParseSystemLiteral() and htmlParsePubidLiteral() functions of HTMLparser.c. The issue is triggered as user-supplied input is not properly validated when parsing characters in a range. With a specially crafted file, a context-dependent attacker can cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. (CVE-2016-1837)

- Libxml2 contains an overflow condition in the xmlFAParseCharRange() function of xmlregexp.c. The issue is triggered as user-supplied input is not properly validated when parsing characters in a range. With a specially crafted file, a context-dependent attacker can cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. (CVE-2016-1840)

- Multiple Apple products contains a flaw in libxslt. The issue is triggered as user-supplied input is not properly validated when handling a specially crafted website. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2016-1841)

- Multiple Apple products contain a flaw in MapKit that is triggered as shared links are transferred insecurely over HTTP. This may potentially allow a man-in-the-middle attacker to gain unauthorized access to sensitive information in these links. (CVE-2016-1842)

- Multiple Apple products contains a flaw in the OpenGL component. The issue is triggered as user-supplied input is not properly validated when handling specially crafted web content. This may allow a context-dependent attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-1847)

- Apple Mac OS X contains a flaw in the AMD component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1792)

- Apple Mac OS X contains a flaw in the AMD component. The issue is triggered as bounds are not properly checked. This may allow a local attacker to determine kernel memory layout. (CVE-2016-1791)

- Apple Mac OS X contains a NULL pointer dereference flaw in the AppleGraphicsControl component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1793)

- Apple Mac OS X contains a NULL pointer dereference flaw in the AppleGraphicsControlClient::checkArguments() function in AppleMuxControl.kext that is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1794)

- Apple Mac OS X contains a flaw in the AppleGraphicsPowerManagement component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1795)

- Apple Mac OS X contains an out-of-bounds read flaw in the ATS component. This may allow a local attacker to potentially disclose kernel memory layout. (CVE-2016-1796)

- Apple Mac OS X contains a flaw in the ATS component that is triggered the sandbox policy is not properly implemented for FontValidator. This may allow a local attacker to potentially execute arbitrary code with system privileges. (CVE-2016-1797)

- Apple Mac OS X contains a NULL pointer dereference flaw in the Audio component that is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a denial of service. (CVE-2016-1798)

- Apple Mac OS X contains a flaw in the Audio component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and potentially execute arbitrary code with kernel privileges. (CVE-2016-1799)

- Apple Mac OS X contains a flaw in the Captive Network Assistant component that is triggered as URL schemes are not properly validated. This may allow a user-assisted, man-in-the-middle attacker to potentially execute arbitrary code. (CVE-2016-1800)

- Apple Mac OS X contains an unspecified configuration flaw in the CoreStorage component. This may allow a local attacker to potentially execute arbitrary code with kernel privileges. (CVE-2016-1805)

- Apple Mac OS X contains a flaw in the Crash Reporter component (com.apple.SubmitDiagInfo) that is triggered when handling user-supplied paths when creating directories. This may allow a local attacker to execute arbitrary code with root privileges. (CVE-2016-1806)

- Apple Mac OS X contains a flaw in the Disk Utility component that is triggered as the incorrect keys were used to encrypt disk images. This may result in disk images not being properly compressed and encrypted. (CVE-2016-1809)

- Apple Mac OS X contains a NULL pointer dereference flaw in the ImageIO component that is triggered when handling a specially crafted image. This may allow a context-dependent attacker to cause a denial of service. (CVE-2016-1810)

- Apple Mac OS X contains an overflow condition in the Intel Graphics Driver component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code with kernel privileges. (CVE-2016-1812)

- Apple Mac OS X contains a NULL pointer dereference in IOAcceleratorFamily that is triggered as user-supplied input is not properly sanitized. This may allow a local attacker to execute arbitrary code with kernel privileges. (CVE-2016-1816)

- Apple Mac OS X contains an overflow condition in the IOAudioFamily component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code with kernel privileges. (CVE-2016-1820)

- Apple Mac OS X contains a NULL pointer dereference in the IOAudioFamily component. This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1821)

- Apple Mac OS X contains a flaw in the IOFireWireFamily component. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code with kernel privileges. (CVE-2016-1822)

- Apple Mac OS X contains multiple flaws in the IOHIDFamily component. These issues are triggered as user-supplied input is not properly validated. This may allow a local attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code with kernel privileges. (CVE-2016-1825)

- Apple Mac OS X contains an integer overflow condition in its dtrace implementation. The issue is triggered as user-supplied input is not properly validated. This may allow a local attacker to execute arbitrary code with kernel privileges. (CVE-2016-1826)

- Apple Mac OS X contains a flaw in the Messages component that is triggered by a failure to properly validate roster changes. This may allow an authenticated remote attacker, or a malicious server, to manipulate another user's contact list. (CVE-2016-1844)

- Apple Mac OS X contains a flaw in the Messages component that is triggered by an encoding issue in filename parsing. This may allow a remote attacker to gain unauthorized access to potentially sensitive user information. (CVE-2016-1843)

- Apple Mac OS X contains a NULL pointer dereference flaw in the nvCommandQueue::GetHandleIndex() function in the NVIDIA Graphics Driver (GeForce.kext). This may allow a local attacker to cause a crash or potentially execute arbitrary code with kernel privileges. (CVE-2016-1846)

- Apple Mac OS X contains a flaw in the QuickTime component. The issue is triggered as user-supplied input is not properly validated when handling a specially crafted file. This may allow a context-dependent attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-1848)

- Apple Mac OS X contains a flaw in the SceneKit component. The issue is triggered as user-supplied input is not properly validated when handling a specially crafted file. This may allow a context-dependent attacker to corrupt memory and cause a denial of service or potentially execute arbitrary code. (CVE-2016-1850)

- Apple Mac OS X contains a flaw in the management of password profiles. This may allow a physically present attacker to bypass the screen lock and reset an expired password. (CVE-2016-1851)

- Apple Mac OS X contains a flaw in the Tcl component related to the usage of SSLv2. This may potentially allow an attacker with the ability to intercept network traffic (e.g. MitM, DNS cache poisoning) to disclose transmitted data. (CVE-2016-1853)

- Apple Mac OS X contains an overflow condition in the NVIDIA Graphics Driver (GeForce.kext). This may allow a local attacker to cause a stack-based buffer overflow and potentially execute arbitrary code with kernel privileges. (CVE-2016-1861)

- No description supplied (CVE-2016-1833, CVE-2016-1839, CVE-2016-1815, CVE-2016-1804)

ID	名稱	產品	系列	已發布	已更新	嚴重性
92496	Mac OS X 10.11.x < 10.11.6 多個弱點	Nessus	MacOS X Local Security Checks	2016/7/21	2024/5/28	critical
91640	openSUSE 安全性更新：libxml2 (openSUSE-2016-734)	Nessus	SuSE Local Security Checks	2016/6/17	2021/1/19	high
91800	OracleVM 3.3 / 3.4：libxml2 (OVMSA-2016-0087)	Nessus	OracleVM Local Security Checks	2016/6/24	2021/1/4	critical
97893	Tenable Log Correlation Engine (LCE) < 4.8.1 Multiple Vulnerabilities	Nessus	Misc.	2017/3/22	2021/10/25	critical
9332	Apple iOS < 9.3.2 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2016/5/26	2019/3/6	high
9337	Apple TV < 9.2.1 Multiple Vulnerabilities	Nessus Network Monitor	Internet Services	2016/5/27	2019/3/6	high
9392	Mac OS X 10.11.x < 10.11.5 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	2016/7/13	2019/3/6	high
802004	macOS < 10.11.5 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection	2016/8/23		high

偵測

搜尋 Plugin

critical

high

critical

critical

high

high

high

high