An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HLinuxfoundation Osquery
APPLinuxfoundation< 3.2.7
Related vulnerabilities
Nieprawidłowa walidacja TLS SNI hostname w osquery — podatność MITM
In some configurations an attacker can inject a new executable path into the extensions.load file for osquery ...
osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery bef...
osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured wi...
containerd CRI plugin: brak walidacji etykiet obrazu umożliwia RCE na hoście