Local Denial of Service in McAfee DLP Endpoint for Windows
CVE-2021-23886

5.5MEDIUM

Key Information:

Vendor

Mcafee,llc

Status
Mcafee Data Loss Prevention (dlp) Endpoint For Windows
Vendor
CVE Published:
15 April 2021

What is CVE-2021-23886?

Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to cause a BSoD through suspending a process, modifying the processes memory and restarting it. This is triggered by the hdlphook driver reading invalid memory.

Affected Version(s)

McAfee Data Loss Prevention (DLP) Endpoint for Windows < 10.6.100.41

References

https://kc.mcafee.com/corporate/index?page=content&id=SB1...
x_refsource_CONFIRM
https://kc.mcafee.com/corporate/index?page=content&id=SB1...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.