CVE-2020-1887

CVE-2020-1887 affects osquery versions post-2.9.0 and before 4.2.0, where TLS SNI hostname validation is incorrect. This could allow an attacker to perform a MITM on osquery traffic if no root trust chain is configured. Remediation: upgrade to 4.2.0 or later (or apply vendor guidance). The connec...

CVE-2019-3567

In osquery, CVE-2019-3567 describes a bypass where an attacker can inject a new executable path into extensions.load and hard link a parent folder of a malicious binary to a folder with safe permissions, causing osquery to load the malicious binary with SYSTEM privileges. The issue affects instal...