CVE-2021-3641: Bitdefender GravityZone Link Following Denial-of-Service Vulnerability
First published: Sat Oct 30 2021(Updated: )
Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions.
Credit: cve-requests@bitdefender.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bitdefender GravityZone | <=7.1.2.33 | |
| Microsoft Windows | ||
Remedy
An automatic update to a newer version of Bitdefender Endpoint Security Tools for Windows fixes the issue
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-in-bitdefender-endpoint-security-tools-for-windows-va-9921/
- https://www.zerodayinitiative.com/advisories/ZDI-22-143/
- https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-in-bitdefender-gravityzone-va-9921
Frequently Asked Questions
What is CVE-2021-3641?
CVE-2021-3641 is a vulnerability that allows local attackers to create a denial-of-service condition on affected installations of Bitdefender GravityZone.
How do attackers exploit CVE-2021-3641?
To exploit CVE-2021-3641, attackers must first obtain the ability to execute low-privileged code on the target system.
Which software is affected by CVE-2021-3641?
CVE-2021-3641 affects Bitdefender GravityZone versions up to 7.1.2.33.
How severe is CVE-2021-3641?
CVE-2021-3641 has a severity score of 6.1 (medium).
How can I fix CVE-2021-3641?
To fix CVE-2021-3641, it is recommended to update Bitdefender GravityZone to the latest version available.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/remedy
- agent/severity
- agent/weakness
- agent/references
- agent/title
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-22-143
- alias/ZDI-CAN-13801
- alias/CVE-2021-3641
- agent/software-canonical-lookup
- agent/tags
- agent/event
- agent/trending
- vendor/bitdefender
- canonical/bitdefender gravityzone
- version/bitdefender gravityzone/7.1.2.33
- vendor/microsoft
- canonical/microsoft windows