CVE-2022-0677CWE-130

Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)

High · published April 7, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to 3.4.0.276. Bitdefender GravityZone versions prior to 26.4-1. Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.171. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.1.111.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01249 · 69.1th percentile
Weakness
CWE-130 · Improper Handling of Length Parameter Inconsistency
Published
2022-04-07T18:21Z
EPSS history
Timeline
  • 07 APR 18:21Z
    Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)
    cvelistv5