Vulnerability · Published Jan 15, 2024 · Assigned by INCIBE
CVE-2024-0316Improper cleanup vulnerability in FireEye Endpoint Security
Medium 6.8
In plain English
A medium-severity security flaw in FireEye Endpoint Security from FireEye . There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.3%top 75.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containment_notify/preview parameter, which could lead to a service outage.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| FireEye | FireEye Endpoint Security | 5.2.0.958244 |
Weakness: CWE-460 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H