Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-23886 EUVD-2021-10812GHSA-67hv-ghcg-2jfq

Local Denial of Service in McAfee DLP Endpoint for Windows

Published Apr 15, 2021 · Updated Aug 3, 2024 · Assigned by trellix

Description

Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to cause a BSoD through suspending a process, modifying the processes memory and restarting it. This is triggered by the hdlphook driver reading invalid memory.

Affected products

VendorProductAffectedFixed
McAfee,LLC McAfee Data Loss Prevention (DLP) Endpoint for Windows unspecified – < 10.6.100.41 10.6.100.41

References