First published: Fri Feb 25 2022(Updated: )
Use-after-free in eset_rtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system.
Credit: security@eset.com
Affected Software | Affected Version | How to fix |
---|---|---|
Eset Endpoint Antivirus | >=7.1.6.0<=7.1.9.0 | |
Eset Endpoint Antivirus | >=8.0.3.0<=8.1.5.0 | |
Eset Server Security | >=7.2.463.0<=7.2.574.0 | |
Eset Server Security | >=8.0.375.0<=8.1.813.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-0615 is a vulnerability in the eset_rtp kernel module used in ESET products for Linux that allows a potential attacker to trigger a denial-of-service condition on the system.
CVE-2022-0615 has a severity rating of 7.5 (high).
ESET Endpoint Antivirus versions 7.1.6.0 to 7.1.9.0, 8.0.3.0 to 8.1.5.0, and ESET Server Security versions 7.2.463.0 to 7.2.574.0, 8.0.375.0 to 8.1.813.0 are affected by CVE-2022-0615.
CVE-2022-0615 can be exploited by a potential attacker to trigger a denial-of-service condition on the system by utilizing a use-after-free vulnerability in the eset_rtp kernel module.
To fix CVE-2022-0615, it is recommended to update ESET Endpoint Antivirus and ESET Server Security to the latest versions available.