Skip to main content

Bitdefender CVE-2020-15293

MEDIUM
Improper Input Validation (CWE-20)
2020-12-17 cve-requests@bitdefender.com
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 17, 2020 - 17:15 nvd
MEDIUM 5.5

DescriptionNVD

Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input validation may lead to denial of service conditions.

AnalysisAI

Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input validation may lead to denial of service conditions. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input validation may lead to denial of service conditions. Affected products include: Bitdefender Hypervisor Introspection.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2012-1461 MEDIUM
4.3 Mar 21

The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5

CVE-2012-1459 MEDIUM
4.3 Mar 21

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7,

CVE-2012-1457 MEDIUM
4.3 Mar 21

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!. Rated medium severity (CVSS 4.3), t

CVE-2012-1443 MEDIUM
4.3 Mar 21

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVir

CVE-2018-8955 CRITICAL POC
9.8 Oct 24

The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installatio

CVE-2021-3485 MEDIUM POC
6.6 May 24

An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linu

CVE-2014-5350 MEDIUM POC
5.0 Aug 19

Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read

CVE-2017-17408 HIGH
8.8 Dec 21

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet

CVE-2017-10954 HIGH
8.8 Oct 31

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet

CVE-2021-3554 CRITICAL
10.0 Nov 24

Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for

CVE-2025-2244 CRITICAL
9.5 Apr 04

A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely

CVE-2024-4177 CRITICAL
9.8 Jun 06

A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to ca

Share

CVE-2020-15293 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy