Buffer Overflow Vulnerability in TA for Linux and MacOS by Trellix

CVE-2024-0213

What is CVE-2024-0213?

A buffer overflow vulnerability exists in TA for Linux and TA for MacOS versions prior to 5.8.1, allowing local users to exploit a memory corruption flaw in the TA service that runs with root privileges. Successful exploitation can lead to elevated permissions, enabling user actions that compromise system integrity, or result in a Denial of Service (DoS) scenario. Additionally, this vulnerability may hinder event reporting to the ePO by failing to validate input from files adequately, creating further security risks.

References