PT-2020-2805 · Bitdefender · Bitdefender Engines

Published 2020-05-15 · Updated 2020-05-19 · CVE-2020-8100

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bitdefender Engines versions prior to 7.84063

Description The issue is related to an Improper Input Validation vulnerability in the cevakrnl.rv0 module. This vulnerability allows an attacker to trigger a denial of service by scanning a specially-crafted sample. The exploitation of this vulnerability can be done remotely.

Recommendations For versions prior to 7.84063, update to version 7.84063 or later to resolve the issue. As a temporary workaround, consider restricting the use of the cevakrnl.rv0 module until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-02933

CVE-2020-8100

Affected Products

Bitdefender Engines

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-8100 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8100 · Vendor Advisory
• https://bitdefender.com/support/security-advisories/incomplete-validation-detection-code-bitdefender-engines-va-8589 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02933 · Security Note
• https://t.me/cvenotify/3828 · Telegram Post