Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2018-6336

An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat bin

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
facebook

Description

An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Facebook osquery

  • 3.2.7affected
  • unspecified to < 3.2.7affected

References