CVE-2018-10403: High severity f-secure xfence vulnerability

Published Jun 13, 2018

Updated

An issue was discovered in F-Secure XFENCE and Little Flocker. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute.

Affected Software

1 affected component

F-Secure XFENCE

Event History

Jun 13, 2018

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-10403?

CVE-2018-10403 has been classified as a medium severity vulnerability.

How do I fix CVE-2018-10403?

To mitigate CVE-2018-10403, ensure that you apply any available updates to F-Secure XFENCE and Little Flocker.

What software is affected by CVE-2018-10403?

CVE-2018-10403 affects F-Secure XFENCE and Little Flocker.

What type of attack can CVE-2018-10403 facilitate?

CVE-2018-10403 can facilitate the execution of malicious code that appears to be signed by Apple due to insufficient inspection of binaries.

Is there a workaround for CVE-2018-10403?

Currently, the best approach to handle CVE-2018-10403 is to update the affected software to address the vulnerability.