Bitdefender Endpoint Security Tools For Linux vulnerabilities

3 vulnerabilities

Known vulnerabilities in Bitdefender Endpoint Security Tools For Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.6CVE-2021-3485bitdefenderendpoint_security_tools+1
EPSS score
0.88%
An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.155.10CVE-2021-3554bitdefenderendpoint_security_tools+3
EPSS score
2.12%
Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender Unified Endpoint versions prior to 6.2.21.160. Bitdefender GravityZone versions prior to 6.24.1-1.7.5CVE-2022-0677bitdefenderendpoint_security_tools+4
EPSS score
1.25%
Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to 3.4.0.276. Bitdefender GravityZone versions prior to 26.4-1. Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.171. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.1.111.