CVE-2020-11081

 

Published at: - 10-07-2020 09:15

Last modified: - 20-01-2023 09:32

Total changes: - 2

Description

osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables local escalation. This is fixed in version 4.4.0.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://github.com/osquery/osquery/security/advisories/GHSA-2xwp-8fv7-c5pm
• https://github.com/osquery/osquery/pull/6433
• https://github.com/osquery/osquery/releases/tag/4.4.0
• https://github.com/osquery/osquery/commit/4d4957f12a6aa0becc9d01d9f97061e1e3d809c5
• https://github.com/osquery/osquery/issues/6426

 

Keywords

NVD

 

CVE-2020-11081

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures