admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-21 05:40:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1746 from lordoxley/patch-15

Browse Source 
Update CVE-2018-6703
This commit is contained in:
CVE Team 2019-03-25 15:04:55 -04:00 committed by GitHub
commit f2941f21d0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 91 additions and 110 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

201
2018/6xxx/CVE-2018-6703.json
View File

@ -1,112 +1,93 @@
{ {
"CVE_data_meta": { "CVE_data_meta": {
"ASSIGNER": "psirt@mcafee.com", "ASSIGNER": "psirt@mcafee.com",
"ID": "CVE-2018-6703", "ID": "CVE-2018-6703",
"STATE": "PUBLIC", "STATE": "PUBLIC",
"TITLE": "McAfee Agent Incorrect memory and handle management vulnerability" "TITLE": "Remote Logging functionality had a use after free vulnerability in McAfee Agent"
}, },
"affects": { "affects": {
"vendor": { "vendor": {
"vendor_data": [ "vendor_data": [
{ {
"product": { "product": {
"product_data": [ "product_data": [
{ {
"product_name": "McAfee Agent (MA)", "product_name": "McAfee Agent",
"version": { "version": {
"version_data": [ "version_data": [
{ {
"affected": ">=", "version_affected": "<",
"platform": "x86", "version_name": "5.x",
"version_name": "5.0.0", "version_value": "5.6.0"
"version_value": "5.0.0" }
}, ]
{ }
"affected": "<=", }
"platform": "x86", ]
"version_name": "5.0.6", },
"version_value": "5.0.6" "vendor_name": "McAfee, LLC"
}, }
{ ]
"version_name": "5.5.0", }
"version_value": "5.5.0" },
}, "data_format": "MITRE",
{ "data_type": "CVE",
"version_name": "5.5.1", "data_version": "4.0",
"version_value": "5.5.1" "description": {
} "description_data": [
] {
} "lang": "eng",
} "value": "Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging service."
] }
}, ]
"vendor_name": "McAfee" },
} "generator": {
"engine": "Vulnogram 0.0.5"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Use After Free"
}
] ]
} }
}, ]
"credit": [ },
{ "references": {
"lang": "eng", "reference_data": [
"value": "McAfee credits Frank Cozijnsen of the KPN RED-team for reporting this flaw." {
} "name": "https://kc.mcafee.com/corporate/index?page=content&id=SB10258",
], "refsource": "CONFIRM",
"data_format": "MITRE", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10258"
"data_type": "CVE", }
"data_version": "4.0", ]
"description": { },
"description_data": [ "source": {
{ "discovery": "UNKNOWN"
"lang": "eng", },
"value": "Use After Free in McAfee Common service in McAfee Agent (MA) 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted TCP packet." "work_around": [
} {
] "lang": "eng",
}, "value": "Remote logging is disabled by default. Turning off remote logging protects against this issue."
"impact": { }
"cvss": { ]
"attackComplexity": "LOW", }
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Use After Free (CWE-416)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://kc.mcafee.com/corporate/index?page=content&id=SB10258",
"refsource": "CONFIRM",
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10258"
}
]
},
"source": {
"advisory": "SB10258",
"discovery": "EXTERNAL"
},
"work_around": [
{
"lang": "eng",
"value": "McAfee highly recommends that all customers upgrade to McAfee Agent 5.6.0.\n\nIf you cannot upgrade, consider the below configuration change as a temporary workaround.\nDisable the remote logging feature via policy:\nGo to the assigned policy type General for the product McAfee Agent.\nGo to Logging tab.\nDisable Enable remote access to log."
}
]
}