PT-2020-14338 · Bitdefender · Bitdefender Hypervisor Introspection

Published 2020-12-17 · Updated 2020-12-22 · CVE-2020-15294

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bitdefender Hypervisor Introspection versions prior to 1.132.2

Description The issue is related to a Compiler Optimization Removal or Modification of Security-critical Code vulnerability in the IntPeParseUnwindData() function, which results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a race-condition where the generated code would dereference the same address twice, thus obtaining different values, which may lead to arbitrary code execution.

Recommendations For versions prior to 1.132.2, update to version 1.132.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the IntPeParseUnwindData() function to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-733

Related Identifiers

CVE-2020-15294

Affected Products

Bitdefender Hypervisor Introspection

References · 4

• https://osv.dev/vulnerability/CVE-2020-15294 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15294 · Security Note
• https://bitdefender.com/support/security-advisories/compiler-optimization-removal-modification-security-critical-code-vulnerability-bitdefender-hypervisor-introspection-va-9339 · Note
• https://t.me/cibsecurity/21005 · Telegram Post