Description
Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version 4.4.1 fixes this issue by removing the operating system's copy during the upgrade.
References (1)
Core 1
Core References
Various Sources x_refsource_misc
https://obdev.at/cve/2019-13014-MzE24Ify4p.html
Scores
CVSS v3
5.5
EPSS
0.0035
EPSS Percentile
27.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-264
CWE-459
Status
published
Products (1)
obdev/little_snitch
4.4.0
Published
Aug 23, 2019
Tracked Since
Feb 18, 2026