[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNiEf-OsQKVH2EkJTrdn8ELXgbZrjWxbHvhPy33BOSyg":3,"g5a-risk:CVE-2018-6336":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":27,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":54,"references":55,"referencesCount":64,"weaknesses":65,"weaknessesCount":54,"isActivelyExploited":74,"cisaInfo":27,"otxData":27,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":110,"notableEvents":111},"CVE-2018-6336","What is CVE-2018-6336?","An issue was discovered in osquery. A maliciously crafted Universal\u002Ffat binary can evade third-party code signing checks. By not completing full inspection of the Universal\u002Ffat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7","An issue was discovered in osquery. A maliciously crafted Universal\u002Ffat binary can evade third-party code signing checks. By not completing full inspection o...","2018-12-31T19:29:00.497","2025-05-06T19:15:53.89",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,1.8,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":40,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":4},{"Version":37,"VectorString":38,"AccessVector":39,"AccessComplexity":40,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":41,"AvailabilityImpact":41,"BaseScore":42,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NETWORK","MEDIUM","PARTIAL",6.8,8.6,6.4,0.00486,[45,45,45,45,45,45,45],"High",[49],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"linuxfoundation","osquery","*","cpe:2.3:a:linuxfoundation:osquery:*:*:*:*:*:*:*:*",1,[56,62],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.okta.com\u002Fsecurity-blog\u002F2018\u002F06\u002Fissues-around-third-party-apple-code-signing-checks\u002F","Okta",[60,61],"Exploit","Third Party Advisory",{"url":57,"source":58,"tags":63},[60,61],2,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-354","Improper Validation of Integrity Check Value","The product does not validate or incorrectly validates the integrity check values or \"checksums\" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.","Improper validation of checksums before use results in an unnecessary risk that can easily be mitigated. The protocol specification describes the algorithm used for calculating the checksum. It is then a simple matter of implementing the calculation and verifying that the calculated checksum and the received checksum match. Improper verification of the calculated checksum and the received checksum can lead to far greater consequences.","Draft","Base","Simple",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2018-6336? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-6336, a high severity cyber security vulnerability from 2018. An issue was discovered in osquery. A maliciously crafted Un...","CVE-2018-6336, CVE-2018-6336 vulnerability, CVE-2018-6336 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, linuxfoundation security, osquery vulnerability","\u002Fwhat-is\u002Fcve-2018-6336",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-6336","Cybersecurity","CVE-2018-6336, CVE-2018-6336 vulnerability, CVE-2018-6336 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":27,"Negate":27,"Nodes":103},[104],{"Operator":105,"Negate":27,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":108,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":109,"VersionEndIncluding":27},"D0C1AE4B-3D39-485C-A8DE-22980C37209C","3.2.7",[],[],{"lastModified":11,"cacheTime":113,"version":37},1792436071850,{"score":115,"band":116,"action":117,"scoredAt":118},45,"Medium","Plan remediation","2026-10-19T06:58:39.95096+00:00"]