Netskope client buffer overflow vulnerability

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• netskope netskope57 and later · before 57.2.0.219
• netskope netskope60 and later · before 60.2.0.214

Versions reported by the vendor

Affected version ranges reported by the assigning authority (airbus). Independent of NVD's CPE analysis and usually ahead of it.

• Netskope Netskope client

  • Netskope client 57.2.0.219, Netskope client 60.2.0.214not affected
  • 54 and later · before Netskope client*affectedfixed in 62

Other highest-scoring records for the same primary product.

• CVE-2020-24576Netskope Client through 77 allows low-privileged users to elevate their privileges to NT AUTHORITY\SYSTEM.
  36Monitor
• CVE-2023-4996Local privilege escalation
  35Monitor
• CVE-2024-7401Client Enrollment Process Bypass
  34Monitor
• CVE-2023-2270Local privilege escalation
  31Monitor
• CVE-2021-44862Sensitive Information store in NSClient logs
  31Monitor
• CVE-2021-41388Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability.
  31Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.