Patch Ticker

Tanium Threat Response multiple flaws allow resource exhaustion and command execution

A company security management program can let hackers take over devices.

Summary

Several flaws in Tanium Threat Response allow resource exhaustion, incorrect input handling and unauthorized command execution, and they have been fixed. The same advisory covers other Tanium products such as Asset, Comply and Connect.

What to do

Update Threat Response to 4.9.480, 4.12.353, or 4.17.333 or later. Update other Tanium products to the versions in their CVE records and check Tanium's advisory.

Update to at least the version for your product:

  • Tanium Threat Response 4.9 4.9.480 or later
  • Tanium Threat Response 4.12 4.12.353 or later
  • Tanium Threat Response 4.17 4.17.333 or later

Products and platforms

  • Tanium Asset
  • Tanium Comply
  • Tanium Connect
  • Tanium Endpoint Configuration Toolset Solution
  • Tanium Health Check
  • Tanium Integrity Monitor
  • Tanium Patch
  • Tanium Performance
  • Tanium Provision Host
  • Tanium Reputation
  • Tanium Reveal
  • Tanium TanOS
  • Tanium Threat Response

CVE IDs

Sources

Times

First published

First seen