PT-2018-2780 · Mcafee · Mcafee Agent

CVE-2018-6703

·

Publicado

2018-12-11

·

Atualizado

2023-01-27

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions McAfee Agent versions prior to 5.6.0
Description The issue is related to a use after free vulnerability in the client component of McAfee Agent. This can be exploited by sending specially crafted HTTP requests, potentially allowing a remote attacker to execute arbitrary code or cause a denial of service. The vulnerability is associated with the remote logging feature, which is disabled by default.
Recommendations For McAfee Agent versions prior to 5.6.0, update to version 5.6.0 or later to resolve the issue. As a temporary workaround, consider disabling the remote logging feature to minimize the risk of exploitation.

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2019-01816
CVE-2018-6703

Produtos afetados

Mcafee Agent