CVE-2024-37284 — Elastic Defend Improper Handling of Alternate Encoding Leads to Crash

CVE-2024-37284

Elastic Defend Improper Handling of Alternate Encoding Leads to Crash PUBLISHED

Description (CNA)

Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing Elastic Defend to crash which in turn will prevent it from quarantining the file and/or killing the process.

Affected (CNA)

Vendor / product	Versions
Elastic / Elastic Defend	affected 8.0.0 before 8.13.3

CWE

CWE-755

References

https://discuss.elastic.co/t/elastic-defend-8-13-3-security-update-esa-2024-24/373441

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.