MEDIUM🇬🇧 English

CVE-2020-15292

CVSS 5.5v3.1pub. 2020-12-17upd. 2024-11-21

Lack of validation on data read from guest memory in IntPeGetDirectory, IntPeParseUnwindData, IntLogExceptionRecord, IntKsymExpandSymbol and IntLixTaskDumpTree may lead to out-of-bounds read or it could cause DoS due to integer-overflor (IntPeGetDirectory), TOCTOU (IntPeParseUnwindData) or insufficient validations.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

  • Bitdefender Hypervisor Introspection

    APP
    Bitdefender
    < 1.132.2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2020-15294HIGH7.8ten sam produkt

Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData(...

CVE-2020-15293MEDIUM6.1ten sam produkt

Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath ...

CVE-2025-1987CRITICAL9.3PL ✓ten sam vendor

Stored XSS w Psono Client / Bitdefender SecurePass via złośliwe URL w magazynie haseł

CVE-2025-2244CRITICAL9.5PL ✓ten sam vendor

Niebezpieczna deserializacja PHP w Bitdefender GravityZone Console (RCE)

CVE-2024-13871CRITICAL9.4PL ✓ten sam vendor

Command injection w Bitdefender Box 1 — nieuwierzytelniony RCE