CVE-2022-0677

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to 3.4.0.276. Bitdefender GravityZone versions prior to 26.4-1. Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.171. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.1.111.

• CWE-130

• https://www.bitdefender.com/support/security-advisories/improper-handling-of-length-parameter-inconsistency-vulnerability-in-bitdefender-update-server-va-10144Vendor Advisory
• https://www.bitdefender.com/support/security-advisories/improper-handling-of-length-parameter-inconsistency-vulnerability-in-bitdefender-update-server-va-10144Vendor Advisory

Published

Apr 7, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0671A flaw was found in vscode-xml in versions prior to 0.19.0. …9.1
• CVE-2022-0672A flaw was found in LemMinX in versions prior to 0.19.0. Ins…5.5
• CVE-2022-0673A flaw was found in LemMinX in versions prior to 0.19.0. Cac…6.5
• CVE-2022-0674The Kunze Law WordPress plugin before 2.1 does not escape it…4.8
• CVE-2022-0675In certain situations it is possible for an unmanaged rule t…9.8
• CVE-2022-0676Heap-based Buffer Overflow in GitHub repository radareorg/ra…7.8
• CVE-2022-0678Cross-site Scripting (XSS) - Reflected in Packagist microweb…6.1
• CVE-2022-0679The Narnoo Distributor WordPress plugin through 2.5.1 fails …9.8
• CVE-2022-0680The Plezi WordPress plugin before 1.0.3 has a REST endpoint …6.1
• CVE-2022-0681The Simple Membership WordPress plugin before 4.1.0 does not…6.5
• CVE-2022-0683The Essential Addons for Elementor Lite WordPress plugin is …6.1
• CVE-2022-0684The WP Home Page Menu WordPress plugin before 3.1 does not s…4.8