CVE-2018-6707

Denial of Service through Resource Depletion vulnerability in the agent in non-Windows McAfee Agent (MA) 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to cause DoS, unexpected behavior, or potentially unauthorized code execution via knowledge of the internal trust mechanism.

CVSS v3 3.7 LOW
CVSS v2.0 4.4 MEDIUM

3.7^/10

CVSS v3 : LOW

Vector : AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:L

Exploitability : 0.6 / Impact : 2.7

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact LOW

Scope CHANGED

4.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 3.4 / Impact : 6.4

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/106307
https://kc.mcafee.com/corporate/index?page=content&id=SB10260
http://www.securityfocus.com/bid/106307
https://kc.mcafee.com/corporate/index?page=content&id=SB10260

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mcafee:agent::::::::
	cpe:2.3:a:mcafee:agent:5.5.0:::::::*
	cpe:2.3:a:mcafee:agent:5.5.1:::::::*

History

21 Nov 2024, 04:11

Type	Values Removed	Values Added
CVSS	v2 : ~~4.4~~ v3 : ~~7.0~~	v2 : 4.4 v3 : 3.7
References	~~() http://www.securityfocus.com/bid/106307 -~~	() http://www.securityfocus.com/bid/106307 -
References	~~() https://kc.mcafee.com/corporate/index?page=content&id=SB10260 -~~	() https://kc.mcafee.com/corporate/index?page=content&id=SB10260 -

Information

Published : 2018-12-14 00:29

Updated : 2024-11-21 04:11

NVD link : CVE-2018-6707

Mitre link : CVE-2018-6707

CVE.ORG link : CVE-2018-6707

JSON object : View

Products Affected

mcafee

agent

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2018-6707", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.4, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "trellixpsirt@trellix.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 3.7, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 0.6}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.0, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.0}]}, "published": "2018-12-14T00:29:01.780", "references": [{"url": "http://www.securityfocus.com/bid/106307", "source": "trellixpsirt@trellix.com"}, {"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10260", "source": "trellixpsirt@trellix.com"}, {"url": "http://www.securityfocus.com/bid/106307", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10260", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "Denial of Service through Resource Depletion vulnerability in the agent in non-Windows McAfee Agent (MA) 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to cause DoS, unexpected behavior, or potentially unauthorized code execution via knowledge of the internal trust mechanism."}, {"lang": "es", "value": "Vulnerabilidad de denegaci\u00f3n de servicio (DoS) mediante consumo de recursos en el agente en plataformas no Windows de McAfee Agent (MA), desde la versi\u00f3n 5.0.0 a la 5.0.6, 5.5.0 y 5.5.1, permite que usuarios locales provoquen una denegaci\u00f3n de servicio (DoS), un comportamiento inesperado o una ejecuci\u00f3n de c\u00f3digo no autorizada mediante el conocimiento del mecanismo interno de confianza."}], "lastModified": "2024-11-21T04:11:07.677", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:agent:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C64E5EC-8233-436C-8C4A-81EC34B3D15E", "versionEndIncluding": "5.0.6", "versionStartIncluding": "5.0.0"}, {"criteria": "cpe:2.3:a:mcafee:agent:5.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29BD74B8-8FF2-4C74-9B9B-DB5C404E5915"}, {"criteria": "cpe:2.3:a:mcafee:agent:5.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A7A7F4E-8425-4518-874A-4D9B0BF6B032"}], "operator": "OR"}]}], "sourceIdentifier": "trellixpsirt@trellix.com"}