PT-2022-3897 · Eset · Eset Endpoint Antivirus+1

Published 2022-02-24 · Updated 2022-03-08 · CVE-2022-0615

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ESET Endpoint Antivirus (affected versions not specified) ESET Server Security (affected versions not specified)

Description The issue is related to a use-after-free condition in the eset rtp kernel module used in ESET products for Linux. This could allow a remote attacker to trigger a denial-of-service condition on the system.

Recommendations For ESET Endpoint Antivirus, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For ESET Server Security, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2022-04708

CVE-2022-0615

Affected Products

Eset Endpoint Antivirus

Eset Server Security

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-0615 · Security Note
• https://bdu.fstec.ru/vul/2022-04708 · Security Note
• https://support.eset.com/en/ca8230 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0615 · Vendor Advisory
• https://support.eset.com/en/ca8230-use-after-free-vulnerability-fixed-in-eset-products-for-linux · Note
• https://t.me/cibsecurity/38120 · Telegram Post