Linuxfoundation Osquery
5 CVEs affecting Linuxfoundation Osquery. Latest disclosed: 2020-12-16. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-1887 | Critical | 9.1 | 2020-03-13 | Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of… |
CVE-2019-3567 | High | 8.1 | 2019-06-03 | In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious bina… |
CVE-2018-6336 | High | 7.8 | 2018-12-31 | An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of… |
CVE-2020-11081 | Medium | 5.3 | 2020-07-10 | osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory… |
CVE-2020-26273 | Medium | 5.2 | 2020-12-16 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery before version 4.6.0, by using sqlite's ATTACH verb… |