What is CVE-2021-31844?

CVE-2021-31844 is a high-severity vulnerability in Mcafee Data_loss_prevention_endpoint, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.2/10. Published 2021-09-17.

How severe is CVE-2021-31844?

High severity. CVSS v3 base score is 8.2 out of 10.

Buffer overflow in Mcafee Data_loss_prevention_endpoint

CVE-2021-31844

A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitrary code with elevated privileges through placing carefully constructed Ami Pro (.sam) fil…

Vulnerability class: Buffer Overflow

EPSS: 0.004 (28.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H.

Affected products

Mcafee Data_loss_prevention_endpoint
Mcafee,llc Mcafee Data Loss Prevention (Dlp) Endpoint For Windows — versions unspecified
Microsoft Windows

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

trellixpsirt@trellix.com (x_refsource_CONFIRM, Broken Link)

Frequently asked questions

What is CVE-2021-31844?: CVE-2021-31844 is a high-severity vulnerability in Mcafee Data_loss_prevention_endpoint, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.2/10. Published 2021-09-17.
How severe is CVE-2021-31844?: High severity. CVSS v3 base score is 8.2 out of 10.