Vulnerability in Obdev Little Snitch

CVE-2019-13014

Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version 4.4.1 fixes this issue by removing the operating system's copy during the upgrade.

EPSS: 0.004 (28.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2019-13014?
CVE-2019-13014 is a medium-severity vulnerability in Obdev Little Snitch, classified under CWE-264. CVSS score: 5.5/10. Published 2019-08-23.
How severe is CVE-2019-13014?
Medium severity. CVSS v3 base score is 5.5 out of 10.