Vulnerability · Published Feb 25, 2022 · Assigned by ESET
CVE-2022-0615Use-after-free vulnerability in ESET products for Linux
Medium 5.9
In plain English
A medium-severity use-after-free in Endpoint Antivirus for Linux from ESET, spol. s r.o.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.8%top 42.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Use-after-free in eset_rtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ESET, spol. s r.o. | Endpoint Antivirus for Linux | 7.1.6.0 – through 7.1.9.08.0.3.0 – through 8.1.5.0 |
| ESET, spol. s r.o. | ESET Server Security for Linux | 7.2.463.0 – through 7.2.574.08.0.375.0 – through 8.1.813.0 |
Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://support.eset.com/en/ca8230 x_refsource_MISC