CVE-2021-31845
High
Description
A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Discover prior to 11.6.100 allows an attacker in the same network as the DLP Discover to execute arbitrary code through placing carefully constructed Ami Pro (.sam) files onto a machine and having DLP Discover scan it, leading to remote code execution with elevated privileges. This is caused by the destination buffer being of fixed size and incorrect checks being made on the source size.
SeverityHigh
CVSS8.4
Exploit probability—
ProductMcafee Data Loss Prevention Discover
PublishedSep 17, 2021
First seenSep 17, 2021
Weakness typeCWE-120CWE-120
How to fix
Update
- mcafee data_loss_prevention_discover11.6.100, 11.7.100 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee data_loss_prevention_discover | v < 11.6.100, 11.7.0 ≤ v < 11.7.100 | 11.6.100, 11.7.100 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.