CVE-2018-6703: Remote Logging functionality had a use after free vulnerability in McAfee Agent
Published Dec 11, 2018
·Updated
Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging service.
Affected Software
1 affected component
McAfee Agent>=5.0.0<5.6.0
Event History
Dec 11, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2018-6703.
2
What is the severity of CVE-2018-6703?
CVE-2018-6703 has a severity rating of critical.
3
What is the affected software for CVE-2018-6703?
The affected software for CVE-2018-6703 is McAfee Agent (MA) 5.x prior to 5.6.0.
4
How can this vulnerability be exploited?
This vulnerability can be exploited by remote unauthenticated attackers sending a specially crafted HTTP header to the logging service.
5
Is there a fix available for CVE-2018-6703?
Yes, a fix is available for CVE-2018-6703. Please refer to the reference link for more information.