This vulnerability concerns Tanium Findings improperly handling highly compressed data inputs, which can result in data amplification effects similar to a compression bomb attack. The vulnerability has a CVSS score of 3.1, indicating low severity, with network attack vector, high attack complexity, low privileges required, no user interaction, and only availability impact. Affected versions include >=1.2 <1.2.95, >=1.4 <1.4.105, and specifically versions 1.2 and 1.4. There are no known exploits in the wild. Tanium has addressed this vulnerability, implying patches or fixed versions are available.

The vulnerability can cause availability impact by triggering denial of service conditions through data amplification when processing highly compressed data. There is no confidentiality or integrity impact reported. No known active exploitation has been observed.

Since Tanium has addressed the vulnerability, users should upgrade to versions later than 1.2.95 and 1.4.105 to mitigate this issue. No additional vendor advisory content is provided, so check Tanium's official resources for the exact fixed versions and patch details.