Osquery (Linuxfoundation) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 109 known versions, newest CVE from 2020-12-16. Vendor: Linuxfoundation.

CVEs of Osquery

• CVE-2020-26273 - CVSS 5.2 (medium), 2020-12-16: osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery before version 4.6.0, by using sqlite's ATTACH…
• CVE-2020-11081 - CVSS 8.2 (high), 2020-07-10: osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable…
• CVE-2020-1887 - CVSS 9.1 (critical), 2020-03-13: Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence…
• CVE-2019-3567 - CVSS 8.1 (high), 2019-06-03: In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard link a parent folder of a malicious…
• CVE-2018-6336 - CVSS 7.8 (high), 2018-12-31: An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of…