Vulnerabilities > Obdev > Little Snitch > 3.6.1

DATE CVE VULNERABILITY TITLE RISK
2020-06-30 CVE-2020-13095 Link Following vulnerability in Obdev Little Snitch
Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user.
network
low complexity
obdev CWE-59
8.8
2017-04-06 CVE-2017-2675 Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part.
local
low complexity
objective-development obdev
7.8
2016-11-15 CVE-2016-8661 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Obdev Little Snitch
Little Snitch version 3.0 through 3.6.1 suffer from a buffer overflow vulnerability that could be locally exploited which could lead to an escalation of privileges (EoP) and unauthorised ring0 access to the operating system.
local
low complexity
obdev CWE-119
8.4