Lucene search

Fluid AttacksCVELIST:CVE-2024-1096

HistoryFeb 13, 2024 - 2:53 p.m.

CVE-2024-1096 Twister Antivirus v8.17 - Denial of Service

2024-02-1314:53:20

CWE-476

Fluid Attacks

www.cve.org

twister antivirus

denial of service

vulnerability

fildds.sys driver

ioctl codes

cve-2024-1096

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.0%

JSON

Twister Antivirus v8.17 is vulnerable to a Denial of Service vulnerability by triggering the 0x80112067, 0x801120CB 0x801120CC 0x80112044, 0x8011204B, 0x8011204F, 0x80112057, 0x8011205B, 0x8011205F, 0x80112063, 0x8011206F, 0x80112073, 0x80112077, 0x80112078, 0x8011207C and 0x80112080 IOCTL codes of the fildds.sys driver.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "Windows"
    ],
    "product": "Twister Antivirus",
    "vendor": "Filseclab",
    "versions": [
      {
        "status": "affected",
        "version": "8.17"
      }
    ]
  }
]

References

www.filseclab.com/en-us/products/twister.htm

fluidattacks.com/advisories/holiday/

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2024-1096