CVE-2020-11081CWE-114

osquery susceptible to DLL search order hijacking of zlib1.dll

Medium · published July 10, 2020

CVSS v3.1
5.3
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables local escalation. This is fixed in version 4.4.0.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00587 · 47.4th percentile
Weakness
CWE-114 · Process Control
Published
2020-07-10T18:45Z
EPSS history
Timeline
  • 10 JUL 18:45Z
    osquery susceptible to DLL search order hijacking of zlib1.dll
    cvelistv5