Index Cx
Monthly
A heap-based buffer overflow in Tanium's Index component (index-cx), also shipped within the Endpoint Configuration Toolset Solution, allows an attacker who already holds local access and low-level privileges on an endpoint to corrupt heap memory, with the potential for code execution at the integrity level of the affected Index process (CVSS 3.1: 7.8, AV:L/PR:L/AC:L, C/I/A all High, Scope Unchanged). Only hosts running the affected index-cx builds (3.9.x, 3.11.x, 3.14.x, 3.15.x, 3.16.x) or Endpoint Configuration Toolset Solution 1.51, 1.59 and 1.71 branches are exposed; the flaw is not reachable remotely or without credentials per the assessed vector. No public exploit code has been identified at time of analysis and there is no KEV listing, but Tanium has released fixed builds and the issue is prioritized for remediation this week.
A heap-based buffer overflow in Tanium's Index component (index-cx), also shipped within the Endpoint Configuration Toolset Solution, allows an attacker who already holds local access and low-level privileges on an endpoint to corrupt heap memory, with the potential for code execution at the integrity level of the affected Index process (CVSS 3.1: 7.8, AV:L/PR:L/AC:L, C/I/A all High, Scope Unchanged). Only hosts running the affected index-cx builds (3.9.x, 3.11.x, 3.14.x, 3.15.x, 3.16.x) or Endpoint Configuration Toolset Solution 1.51, 1.59 and 1.71 branches are exposed; the flaw is not reachable remotely or without credentials per the assessed vector. No public exploit code has been identified at time of analysis and there is no KEV listing, but Tanium has released fixed builds and the issue is prioritized for remediation this week.