CVE-2020-8095 Bitdefender Total Security Link Resolution Denial-of-Service Vulnerability
An attacker can trigger a denial of service on Bitdefender Total Security by exploiting improper junction handling during deletion.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-8095?
CVE-2020-8095 is a medium-severity denial of service vulnerability in Bitdefender Total Security 2020, published on 30 Jan 2020. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device.
Which versions are affected by CVE-2020-8095?
It affects 1 product.
Products include Bitdefender Total Security 2020.
How do I fix CVE-2020-8095?
No fix has been published for CVE-2020-8095 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-8095 being exploited?
There is no known exploitation of CVE-2020-8095 in the wild and no public exploit code.
Other vulnerabilities in Bitdefender Total Security 2020
Sources
Also known as GHSA-vwwr-hfc3-7v39.