SB2020052119 - Multiple vulnerabilities in Cisco AMP for Endpoints Mac Connector Software

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Input validation error (CVE-ID: CVE-2020-3314)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in the file scan process. A remote attacker can trick a victim to open a specially crafted file and perform a denial of service (DoS) attack.

2) Buffer overflow (CVE-ID: CVE-2020-3344)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error. A local user can send a specially crafted packet, trigger memory corruption and cause a denial of service condition on the target system.

Remediation

Install update from vendor's website.

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4emac-dos-kfKjUGtM
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4elinux-h33dkrvb