What is CVE-2022-0677?

CVE-2022-0677 is a high-severity vulnerability in Bitdefender Endpoint Security Tools For Linux, classified under Improper Handling of Length Parameter Inconsistency. CVSS score: 7.5/10. Published 2022-04-07.

How severe is CVE-2022-0677?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Bitdefender Endpoint Security Tools For Linux

CVE-2022-0677

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. T…

EPSS: 0.005 (67.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Bitdefender Endpoint Security Tools For Linux — versions unspecified
Bitdefender Endpoint Security Tools For Windows — versions unspecified
Bitdefender Gravityzone — versions unspecified
Bitdefender Update Server — versions unspecified

Weakness classification (CWE)

CWE-130 — Improper Handling of Length Parameter Inconsistency

References

www.bitdefender.com/support/security-advisories/improper-handling-of-length-par… (x_refsource_MISC)

Frequently asked questions

What is CVE-2022-0677?: CVE-2022-0677 is a high-severity vulnerability in Bitdefender Endpoint Security Tools For Linux, classified under Improper Handling of Length Parameter Inconsistency. CVSS score: 7.5/10. Published 2022-04-07.
How severe is CVE-2022-0677?: High severity. CVSS v3 base score is 7.5 out of 10.