远程主机上运行的 macOS / Mac OS X 版本低于 Catalina Security Update 2021-005。因此，该应用程序受到多个漏洞的影响，其中包括：

  - 处理恶意构建的图像时的任意代码执行。（CVE-2021-30835、CVE-2021-30847）

  - 输入验证不充分导致的整数溢出问题，该问题可导致未经身份验证的攻击者在处理恶意构建的 PDF 时执行任意代码。(CVE-2021-30860)

  - 处理恶意构建的 dfont 文件时的任意代码执行。（CVE-2021-30841、CVE-2021-30842、CVE-2021-30843）

请注意，Nessus 并未测试此问题，而是只依靠操作系统自我报告的版本号。

curl supports the -t command line option, known as CURLOPT_TELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEW_ENV variables, libcurlcould be made to pass on uninitialized data from a stack based buffer to theserver. Therefore potentially revealing sensitive internal information to theserver using a clear-text network protocol.This could happen because curl did not call and use sscanf() correctly whenparsing the string provided by the application.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
194926	Universal Forwarders 8.2.0 < 8.2.12、9.0.0 < 9.0.6、9.1.0 < 9.1.1 (SVD-2023-0809)	Nessus	CGI abuses	2024/5/2	2024/5/30	critical
153432	macOS 10.15.x < Catalina 安全更新 2021-005 Catalina (HT212805)	Nessus	MacOS X Local Security Checks	2021/9/16	2024/5/28	high
504006	Siemens SIMATIC S7-1500 Use of Uninitialized Resource (CVE-2021-22925)	Tenable OT Security	Tenable.ot	2025/11/13	2025/11/13	medium

检测

插件搜索

critical

high

medium