CVE-2018-6336

Name of the Vulnerable Software and Affected Versions osquery versions prior to 3.2.7

Description A maliciously crafted Universal/fat binary can evade third-party code signing checks in osquery, allowing unsigned code to execute. This occurs because the full inspection of the Universal/fat binary is not completed, leading the user of the third-party tool to believe the code is signed by Apple.

Recommendations For osquery versions prior to 3.2.7, update to version 3.2.7 or later to resolve the issue.