PT-2018-17486

CVE-2018-6336

Published

2018-12-31

Updated

2025-05-06

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions osquery versions prior to 3.2.7

Description A maliciously crafted Universal/fat binary can evade third-party code signing checks in osquery, allowing unsigned code to execute. This occurs because the full inspection of the Universal/fat binary is not completed, leading the user of the third-party tool to believe the code is signed by Apple.

Recommendations For osquery versions prior to 3.2.7, update to version 3.2.7 or later to resolve the issue.

Exploitability

Exploit

Fix

Researchers

Josh Pitts

Vendors

Affected products

Weakness enumeration

CWE-354: Improper Validation of Integrity Check Value

CWE-254

Related identifiers