Apple pushed out a critical security update for Mac users today, and if your Mac is running Yosemite, Mavericks, or Mountain Lion, you’ll want to install it immediately.
OS X NTP Security Update was released to users via the Mac App Store today and fixes a critical security issue with the software that provides the Network Time Protocol service on OS X.
The release notes don’t mention the specific security problem with NTP being addressed, but it appears Apple is fixing a vulnerability originally discovered by Google’s security team. The U.S. cyber emergency response team reported last week that the exploit allows attackers to execute arbitrary code with the privileges of the ntpd process.
Neel Mehta and Stephen Roettger, the pair of Google researchers that discovered the vulnerability, say that it could be exploited remotely and many exploits that target the vulnerability are already available in the public.
The NTP.org advisory says that a single packet of data is enough to exploit any of the buffer overflow vulnerabilities and “potentially allow malicious code to be executed with the privilege level of the ntpd process.”
Mac users on OS X 10.8 – 10.10 should check the Mac App Store for the update as soon as possible. It can also be downloaded via Software Update in the Apple Menu.
Source: Apple
Buster Hein is a freelance writer who lives in Phoenix, Arizona. Twitter: @bst3r.
3 responses to “Mac users should install Apple’s NTP security update ASAP”
There was a Notification on both my MacBook Pro and Mac-mini that a security update had been installed, but this update dosen’t appear in the Apple Store Updates Installed listing when I checked to see what the update was for……, which made me wonder…so, glad to see your advisory on this, thanks.
Apple has chosen to push this security update out with their automated system. This is the first time they’ve used this system.
Updates have never downloaded and installed for me in the past but this one did both while I was at work any my MacBook was closed and asleep…..