Описание
An issue was discovered in Falco through 0.14.0. A missing indicator for insufficient resources allows local users to bypass the detection engine.
Ссылки
- Vendor Advisory
- PatchThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
- PatchThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.14.0 (включая)
cpe:2.3:a:falco:falco:*:*:*:*:*:*:*:*
EPSS
Процентиль: 28%
0.00101
Низкий
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-416
Связанные уязвимости
CVSS3: 5.5
github
больше 3 лет назад
An issue was discovered in Sysdig through 0.24.2, as used in Falco through 0.14.0 and other products. A bypass allows local users to run malicious code without being detected because record_event_consumer in driver/main.c in sysdig-probe.ko (and falco-probe.ko) mishandles a free space calculation.
EPSS
Процентиль: 28%
0.00101
Низкий
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-416