CVE-2020-8100 - Incomplete validation in detection code in Bitdefender Engines (VA-8589)

Back Back to CVE browser

CRITICAL

Incomplete validation in detection code in Bitdefender Engines (VA-8589)

Published May 15, 2020

9.0

CRITICAL

CVSS 3.1

EPSS 1.00%

Description

Improper Input Validation vulnerability in the cevakrnl.rv0 module as used in the Bitdefender Engines allows an attacker to trigger a denial of service while scanning a specially-crafted sample. This issue affects: Bitdefender Bitdefender Engines versions prior to 7.84063.

Affected products

Vendor Bitdefender Product Bitdefender Engines Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <7.84063

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Bitdefender

Bitdefender Engines

n/a

Version	Status	Constraints
unspecified	affected	<7.84063

Remediation

Vendor solution

An automatic update to engines version 7.84063 fixes the issue.

Weaknesses (1)

CWE-20

Improper Input Validation

References (1)

https://www.bitdefender.com/support/security-advisories/incomplete-validation-detection-code-bitdefender-engines-va-8589/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://www.bitdefender.com/support/security-advisories/incomplete-validation-detection-code-bitdefender-engines-va-8589/		x_refsource_MISCVendor Advisory