CVE-2020-8100: Incomplete validation in detection code in Bitdefender Engines (VA-8589)
First published: Mon May 11 2020(Updated: )
Improper Input Validation vulnerability in the cevakrnl.rv0 module as used in the Bitdefender Engines allows an attacker to trigger a denial of service while scanning a specially-crafted sample. This issue affects: Bitdefender Bitdefender Engines versions prior to 7.84063.
Credit: cve-requests@bitdefender.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bitdefender Engines | <7.84063 |
Remedy
An automatic update to engines version 7.84063 fixes the issue.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-8100.
What is the severity rating of CVE-2020-8100?
CVE-2020-8100 has a severity rating of 7.5 (critical).
What software is affected by CVE-2020-8100?
CVE-2020-8100 affects Bitdefender Engines versions prior to 7.84063.
What is the impact of CVE-2020-8100?
CVE-2020-8100 allows an attacker to trigger a denial of service while scanning a specially-crafted sample.
Is there a fix available for CVE-2020-8100?
Yes, Bitdefender has released a fix for CVE-2020-8100. Please refer to the Bitdefender website for more information.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/remedy
- agent/references
- agent/author
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- agent/tags
- vendor/bitdefender
- canonical/bitdefender engines