PT-2023-2508 · Avast+1 · Avast Antivirus+1

CVE-2023-1585 · Publicado 2023-02-14 · Atualizado 2023-05-01

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 22.11 AVG Antivirus versions prior to 22.11

Description The issue is related to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, which can lead to arbitrary file or directory deletion. This vulnerability is associated with synchronization errors when using a shared resource.

Recommendations For Avast Antivirus versions prior to 22.11, update to version 22.11 or later and ensure virus definitions from 14 February 2023 or later are installed. For AVG Antivirus versions prior to 22.11, update to version 22.11 or later and ensure virus definitions from 14 February 2023 or later are installed.

Correção

Time Of Check To Time Of Use

Enumeração de Fraquezas

CWE-367

Identificadores relacionados

BDU:2023-02303

CVE-2023-1585

Produtos afetados

Avg Antivirus

Avast Antivirus

Referências · 8

• https://t.me/proxy_bar/1467 · Publicação no Telegram
• https://t.me/cvenotify/49544 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-1585 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1585 · Aviso do Fabricante
• https://t.me/defcon_news/112710 · Publicação no Telegram
• https://support.norton.com/sp/static/external/tools/security-advisories.html · Nota
• https://bdu.fstec.ru/vul/2023-02303 · Nota de Segurança
• https://t.me/cibsecurity/62480 · Publicação no Telegram