Security Vulnerabilities fixed in Carbon Black Sensor ADVISORY: 2018-02-12

description-logoDescription

cb.exe and cbstream.sys driver in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid pointer dereference, and application crash) by leveraging access to the NetMon named pipe. Also unprivielged users can perform unauthorized actions in this version.

affected-products-logoAffected Applications

Carbon Black Sensor