Impact
A vulnerability in Tanium Client allows an attacker to cause a denial of service by triggering a flaw that consumes system resources until the client crashes or becomes unresponsive. The weakness is a classic integer overflow issue as identified by CWE-190, which can lead to memory corruption or system instability. The impact is localized to the affected Tanium Client process, potentially disrupting endpoint management and monitoring functions for the compromised machine.
Affected Systems
The vulnerability affects Tanium Client software. Specific affected versions are not listed in the data, so all deployments of Tanium Client remain potentially impacted until a patch is applied.
Risk and Exploitability
The CVSS score of 6.5 indicates moderate severity. The EPSS score is not available, so the likelihood of exploitation cannot be quantified. The vulnerability is not listed in the CISA KEV catalog, suggesting no known public exploits. The attack vector is not explicitly stated; based on the description, it is inferred that the flaw could be triggered through normal client operation or potentially by malicious inputs crafted to exploit the integer overflow. Remote execution is not confirmed, but any ability to send special input to the client would enable exploitation. Overall, the risk is moderate with uncertainty around exploitation frequency and vector.
OpenCVE Enrichment