Aller au contenu
Se connecter
7.8 Élevée

CVE-2018-6336 An issue was discovered in osquery

Description

An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7

Produits et versions touchés

Produit Versions touchées Corrigé en
osquery 3.2 premières → 3.2.7 3.2.7

Autres CVE de osquery

Les 3 CVE de osquery →
CVE-2020-1887 Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to… Non notée CVE-2019-3567 In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard… Non notée
Suivre cette CVE