Description
A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trellix | Trellix Agent | 5.7.8 – ≤ 5.7.8 | — |
Advisories 1
- WID-SEC-2023-0817 Trellix Agent: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 30, 2023