CVE-2020-24089 Denial of service in n/a

What is CVE-2020-24089?

CVE-2020-24089 is a medium-severity denial of service vulnerability in n/a, published on 19 Sep 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a denial of service (DoS).

Weakness: CWE-400

Which versions are affected by CVE-2020-24089?

It affects 1 product.

Products include Iobit Malware Fighter.

How do I fix CVE-2020-24089?

No fix has been published for CVE-2020-24089 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2020-24089 being exploited?

There is no known exploitation of CVE-2020-24089 in the wild and no public exploit code.

Public exploit code: 1 proofs of concept on GitHub.

Other vulnerabilities in n/a

• CVE-2016-20059 IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation High 8.5
• CVE-2020-23864 Privilege escalation in n/a High 7.8
• CVE-2018-19084 Memory corruption in n/a High 7.8
• CVE-2018-19085 Memory corruption in n/a High 7.8
• CVE-2018-19086 Memory corruption in n/a High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5g25-5pfp-fm6c.