← Back

CVE-2022-0677

nvd nist
Published: Apr 7, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to 3.4.0.276. Bitdefender GravityZone versions prior to 26.4-1. Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.171. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.1.111.

Affected (4)

Bitdefender
3 products
Endpoint Security Tools
Gravityzone
Update Server
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Bitdefender
Endpoint Security Tools
Before 6.2.21.171
Endpoint Security Tools
Before 7.4.1.111
Gravityzone
Before 26.4-1
Update Server
Before 3.4.0.276

Related CWEs

CWE-130
Improper Handling of Length Parameter Inconsistency
The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

References (2)

Source: cve-requests@bitdefender.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.