CVE-2024-0316: Improper cleanup vulnerability in FireEye Endpoint Security

Published Jan 15, 2024

Updated

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containmentnotify/preview parameter, which could lead to a service outage.

Affected Software

1 affected component

FireEye Endpoint Security=5.2.0.958244

Remediation

Information

The FireEye team is working on fixing the reported vulnerabilities. It is recommended to update affected products to the latest version available.

Event History

Jan 15, 2024

CVE Published

via MITRE·04:04 PM

Data Sourced

via MITRE·04:04 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-0316?

CVE-2024-0316 is considered a high-severity vulnerability due to its potential to cause service outages.

How do I fix CVE-2024-0316?

To fix CVE-2024-0316, upgrade FireEye Endpoint Security to the latest version that addresses this vulnerability.

What versions of FireEye Endpoint Security are affected by CVE-2024-0316?

CVE-2024-0316 specifically affects FireEye Endpoint Security version 5.2.0.958244.

What type of attack is made possible by CVE-2024-0316?

CVE-2024-0316 allows attackers to send multiple request packets which could lead to a denial of service.

What component of FireEye Endpoint Security is vulnerable in CVE-2024-0316?

The vulnerability in CVE-2024-0316 is within the containment_notify/preview parameter.