Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4xm5-4w7j-j8qm

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7

An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7

EPSS

Процентиль: 27%
0.00094
Низкий

7.8 High

CVSS3

Дефекты

CWE-354

Связанные уязвимости

CVSS3: 7.8
nvd
около 7 лет назад

An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7

EPSS

Процентиль: 27%
0.00094
Низкий

7.8 High

CVSS3

Дефекты

CWE-354