CVE-2017-2675

High

Published: 06/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Little Snitch versions 3.0 through 3.7.3 have a local privilege escalation vulnerability in the installer part. The issue is related to the installation of the configuration file 'at.obdev.littlesnitchd.plist', which gets installed to /Library/LaunchDaemons.

Risk Assessment

This vulnerability may allow local users to gain elevated privileges on the system, potentially leading to unauthorized access to system resources.

Recommendation

It is recommended to update Little Snitch to the latest version to mitigate this vulnerability and to monitor the system for unauthorized changes.

Other vulnerabilities in Little Snitch

CVE-2016-8661High
Little Snitch versions 3.0 through 3.6.1 have a buffer overflow vulnerability that could be locally exploited, leading to an escalation of privileges and unauthorized ring0 access to the operating system. The buffer overflow is related to insufficient checking of parameters to the 'OSMalloc' and 'copyin' kernel API calls.

Original NVD description (English source)

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons.