Vulnerability in Obdev Little Snitch
CVE-2019-13014
Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version 4.4.1 fixes this issue by removing the operating system's copy during the upgrade.
EPSS: 0.004 (28.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Obdev Little_snitch — versions 4.4.0
- N/a Little Snitch — versions 4.4.0
Weakness classification (CWE)
References
- office@obdev.at (x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-13014?
- CVE-2019-13014 is a medium-severity vulnerability in Obdev Little Snitch, classified under CWE-264. CVSS score: 5.5/10. Published 2019-08-23.
- How severe is CVE-2019-13014?
- Medium severity. CVSS v3 base score is 5.5 out of 10.