Resolved LPE vulnerability in Taegis Endpoint Agent (Linux) (CVE-2024-13861)

Overview

Secureworks – a Sophos company – has fixed a local privilege escalation vulnerability in the Debian package component of Taegis Endpoint Agent (Linux), allowing arbitrary code execution. Redhat-based Linux systems using RPM packages were not affected.

There is no action required for customers using the default updating policy, as updates are installed automatically by default.

Customers opting out of automatic updates are required to upgrade to receive this fix. See below for details.

Applies to the following product(s) and version(s)

Taegis Endpoint Agent (Linux) prior version 1.3.10

Remediation

• Ensure you are running the latest version of Taegis Endpoint Agent
• Fix included in Taegis Endpoint Agent (Linux) version 1.3.10 on 26 June 2024
• Users of older versions of Taegis Endpoint Agent (Linux) are required to upgrade to receive the latest protections, and this fix

Related information

• https://www.cve.org/CVERecord?id=CVE-2024-13861
• https://docs.ctpx.secureworks.com/taegis_agent/changelog/#1310