MEDIUM🇵🇱 Wersja polska

CVE-2024-3779

CVSS 6.1v3.1pub. 2024-07-16upd. 2024-11-21

Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

  • Eset Endpoint Antivirus

    APP
    Eset
    < 11.1.2039.0

  • Eset Endpoint Security

    APP
    Eset
    < 11.1.2039.0

  • Eset Internet Security

    APP
    Eset
    < 17.2.7.0

  • Eset Mail Security

    APP
    Eset
    ≤ 11.0.10008.0

  • Eset Nod32

    APP
    Eset
    < 17.2.7.0

  • Eset Security

    APP
    Eset
    < 17.2.7.0< 11.0.15004.0

  • Eset Server Security

    APP
    Eset
    < 11.0.12012.0

  • Eset Smart Security

    APP
    Eset
    < 17.2.7.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2020-10180CRITICAL9.8PL ✓same product

Ominięcie wykrywania wirusów w ESET przez zmodyfikowane archiwum BZ2

CVE-2015-8841CRITICAL9.8PL ✓same product

Heap-based buffer overflow w ESET NOD32 — RCE przez plik SIS

CVE-2024-0353HIGH7.8same product

Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to d...

CVE-2023-5594HIGH7.5same product

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermedia...

CVE-2023-3160HIGH7.8same product

The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to...