CVE-2013-1741

嘗試寫入 4Gb 的 NULL 時，64 位元電腦上憑證剖析中的 memset 失控，進而導致當機。

CVE-2013-5606

使用 verifylog 模式驗證憑證時，不會傳回驗證錯誤，但是會期望應用程式透過查看記錄來判斷狀態。

CVE-2014-1491

票證處理保護機制繞過，這是因為在 Diffie-Hellman 金鑰交換中缺少公開值的限制所致。

CVE-2014-1492

萬用字元憑證不正確的 IDNA 網域名稱比對可能導致將特製的無效憑證視為有效。

注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

The remote host is running a version of Mac OS X 10.10.x that is prior to version 10.10.4 and the following components contain vulnerabilities :

  - Admin Framework 
-  afpserver 
 - apache 
 - AppleFSCompression 
 - AppleGraphicsControl 
 - AppleThunderboltEDMService 
 - ATS 
 - Bluetooth 
 - Certificate Trust Policy 
 - CFNetwork HTTPAuthentication 
 - CoreText 
 - coreTLS 
 - DiskImages 
 - Display Drivers 
 - EFI 
 - FontParser 
 - Graphics Driver 
 - ImageIO 
 - Install Framework Legacy 
 - Intel Graphics Driver 
 - IOAcceleratorFamily 
 - IOFireWireFamily 
 - Kernel 
 - kext tools 
 - Mail 
 - ntfs 
 - ntp 
 - OpenSSL 
 - QuickTime 
 - Security 
 - Spotlight 
 - SQLite 
 - System Stats 
 - TrueTypeScaler 
 - zip

The remote host is running a version of iOS that is prior to version 8.4.0 and the following components contain vulnerabilities :

 - Application Store 
 - Certificate Trust Policy 
 - CFNetwork HTTPAuthentication 
 - CoreGraphics 
 - CoreText 
 - coreTLS 
 - DiskImages 
 - FontParser 
 - ImageIO 
 - Kernel 
 - Mail 
 - MobileInstallation 
 - Safari 
 - Security 
 - SQLite 
 - Telephony 
 - WebKit 
 - WiFi Connectivity 


ID	名稱	產品	系列	已發布	已更新	嚴重性
82171	Debian DLA-23-1：nss 安全性更新	Nessus	Debian Local Security Checks	2015/3/26	2021/1/11	high
8801	Mac OS X < 10.10.4 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	2015/10/12	2019/3/6	critical
8977	Apple iOS < 8.4 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2015/10/12	2019/3/6	high

偵測

搜尋 Plugin

high

critical

high