Vulnerabilities > CVE-2022-0677 - Unspecified vulnerability in Bitdefender Endpoint Security Tools, Gravityzone and Update Server

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

bitdefender

NVD

Published: 2022-04-07

Updated: 2022-04-14

Summary

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to 3.4.0.276. Bitdefender GravityZone versions prior to 26.4-1. Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.171. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.1.111.

Vulnerable Configurations

Part	Description	Count
Application	Bitdefender Bitdefender Endpoint Security Tools - Bitdefender Endpoint Security Tools 6.6.18.261 Bitdefender Endpoint Security Tools 6.6.23.320 Bitdefender Endpoint Security Tools 6.2.21.18 Bitdefender Endpoint Security Tools 6.2.21.155 Bitdefender Update Server - Bitdefender Gravityzone - Bitdefender Gravityzone 3.3.8.249 Bitdefender Gravityzone 5.1.5.386 Bitdefender Gravityzone 5.1.11.432 Bitdefender Gravityzone 5.1.21.465 Bitdefender Gravityzone 5.1.23-470 Bitdefender Gravityzone 5.1.23-471 Bitdefender Gravityzone 5.1.23-472 Bitdefender Gravityzone 5.1.23-473 Bitdefender Gravityzone 5.1.23-474 Bitdefender Gravityzone 5.1.23-476 Bitdefender Gravityzone 5.1.23-477 Bitdefender Gravityzone 5.1.25-483 Bitdefender Gravityzone 5.1.25-487 Bitdefender Gravityzone 5.1.25-525 Bitdefender Gravityzone 5.1.25-526 Bitdefender Gravityzone 6.1.27-537 Bitdefender Gravityzone 6.1.29-540 Bitdefender Gravityzone 6.1.29-545 Bitdefender Gravityzone 6.1.29-546 Bitdefender Gravityzone 6.1.29-547 Bitdefender Gravityzone 6.1.41-549 Bitdefender Gravityzone 6.2.1-30 Bitdefender Gravityzone 6.2.1-34 Bitdefender Gravityzone 6.2.1-35 Bitdefender Gravityzone 6.3.1-4 Bitdefender Gravityzone 6.3.3-2 Bitdefender Gravityzone 6.3.3-3 Bitdefender Gravityzone 6.3.3-4 Bitdefender Gravityzone 6.3.3-8 Bitdefender Gravityzone 6.3.3-9 Bitdefender Gravityzone 6.3.5-2 Bitdefender Gravityzone 6.3.5-3 Bitdefender Gravityzone 6.3.5-4 Bitdefender Gravityzone 6.3.7-1 Bitdefender Gravityzone 6.3.7-7 Bitdefender Gravityzone 6.3.9-3 Bitdefender Gravityzone 6.5.3-70 Bitdefender Gravityzone 6.24.1-1	45

References

https://www.bitdefender.com/support/security-advisories/improper-handling-of-length-parameter-inconsistency-vulnerability-in-bitdefender-update-server-va-10144