CVE-2023-0977: Medium severity trellix agent vulnerability
A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability is identified by CVE-2023-0977.
What is the severity level of CVE-2023-0977?
CVE-2023-0977 has a severity level of 6.5 (medium).
Which software versions are affected by CVE-2023-0977?
Versions 5.7.8 and earlier of Trellix Agent for Windows and Linux are affected by CVE-2023-0977.
How does CVE-2023-0977 impact the affected software?
CVE-2023-0977 allows a remote user to alter the page heap in the macmnsvc process memory block, resulting in the service becoming unavailable.
Is Linux Linux kernel or Microsoft Windows affected by CVE-2023-0977?
No, Linux Linux kernel and Microsoft Windows are not affected by CVE-2023-0977.
Where can I find more information about CVE-2023-0977?
More information about CVE-2023-0977 can be found at https://kcm.trellix.com/corporate/index?page=content&id=SB10396.