Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2018-6703

Remote Logging functionality had a use after free vulnerability in McAfee Agent

Description

Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee, LLC McAfee Agent

  • 5.x to < 5.6.0affected

References