| Package | Affected versions | Patched versions |
|---|---|---|
| paragon backup & recovery | ≥ 15, ≤ 17.39 | |
| paragon disk wiper | ≥ 15, ≤ 16 | |
| paragon drive copy | ≥ 15, ≤ 16 | |
| paragon hard disk manager | ≥ 15, ≤ 17.39 | |
| paragon migrate os to ssd | ≥ 4, ≤ 5 | |
| paragon partition manager | ≥ 15, ≤ 17.39 |
Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free