CVE-2020-11081 - CVE House
Back to Database
Status published Medium CVE-2020-11081

osquery susceptible to DLL search order hijacking of zlib1.dll

Vulnerability Description

osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables local escalation. This is fixed in version 4.4.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-11081

Credits & Attribution

No credits recorded in the NVD database.

References

More from osquery

View All →
CVE-2020-26273
sqlite ATTACH allows some filesystem access
Medium 5.2

Affected Vendor

Affected Software

osquery
Vulnerable Versions:
< 4.4.0

Timeline

Official Publish: July 10th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N

Weaknesses (CWE)

CWE-114

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.