Trellix HX Console Denial-of-Service Vulnerability via Exponential Entity Expansion

A denial-of-service vulnerability has been identified in Trellix HX versions through 10.0.0. An attacker with access to the HX console can send specially-crafted data that triggers malicious detection. This, in turn, causes the consumer process to parse files with exponential entity expansions, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, disrupting the normal operation of the affected system or application.