Lucene search

[email protected]CVE-2018-10404

HistoryJun 13, 2018 - 10:29 p.m.

CVE-2018-10404

2018-06-1322:29:00

CWE-295

[email protected]

web.nvd.nist.gov

objective-see

knockknock

lulu

taskexplorer

whatsyoursign

procinfo

code signing

evasion

universal binary

third-party tool

apple

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.1%

JSON

An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute.

Affected configurations

NVD

Node

objective-seeknockknockRange≤1.9.3

objective-seeluluRange≤0.9.8

objective-seeprocinfoMatch-

objective-seetaskexplorerRange≤1.6.0

objective-seewhatsyoursignRange≤1.4.0

CPENameOperatorVersion
objective-see:knockknockobjective-see knockknockle1.9.3
objective-see:luluobjective-see lulule0.9.8
objective-see:procinfoobjective-see procinfoeq-
objective-see:taskexplorerobjective-see taskexplorerle1.6.0
objective-see:whatsyoursignobjective-see whatsyoursignle1.4.0

CPE	Name	Operator	Version
objective-see:knockknock	objective-see knockknock	le	1.9.3
objective-see:lulu	objective-see lulu	le	0.9.8
objective-see:procinfo	objective-see procinfo	eq	-
objective-see:taskexplorer	objective-see taskexplorer	le	1.6.0
objective-see:whatsyoursign	objective-see whatsyoursign	le	1.4.0