CVE-2020-3344: 
Cisco Secure Endpoint vulnerability analysis and mitigation

A vulnerability (CVE-2020-3344) was identified in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software. The vulnerability was discovered in December 2019 and publicly disclosed on May 20, 2020. This security flaw affects the buffer management in both Linux and Mac versions of the Cisco AMP for Endpoints Connector Software (CVE Mitre).

The vulnerability stems from insufficient input validation in the software's buffer management. It has been assigned a CVSS base score of 5.5, indicating a moderate severity level. The technical nature of the flaw could allow an authenticated, local attacker to cause a buffer overflow on an affected device by sending crafted packets (Cisco Advisory).

A successful exploitation of this vulnerability could allow an attacker to cause the Cisco AMP for Endpoints service to crash and restart, resulting in a denial of service condition. The impact is limited to service disruption, with no reported capability for code execution or data compromise (CVE Mitre).

The vulnerability requires local access and authentication for exploitation. An attacker would need to send specifically crafted packets to an affected device to trigger the buffer overflow condition. There have been no reported instances of this vulnerability being exploited in the wild (Cisco Advisory).

Cisco has released software updates to address this vulnerability. Users of affected systems should update their software to the latest version. The vulnerability affects both Linux and Mac versions of the Cisco AMP for Endpoints Connector Software (Threatpost).