An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7
oryginał ENCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HLinuxfoundation Osquery
APPLinuxfoundation< 3.2.7
Powiązane podatności
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an a...
In some configurations an attacker can inject a new executable path into the extensions.load file for osquery ...
osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery bef...
osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured wi...
containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 t...