osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables local escalation. This is fixed in version 4.4.0.
oryginał ENCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:NLinuxfoundation Osquery
APPLinuxfoundation< 4.4.0
Powiązane podatności
Nieprawidłowa walidacja TLS SNI hostname w osquery — podatność MITM
In some configurations an attacker can inject a new executable path into the extensions.load file for osquery ...
An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code sign...
osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery bef...
containerd CRI plugin: brak walidacji etykiet obrazu umożliwia RCE na hoście