CVE-2024-0316: Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.9582

Routine

MEDIUM 6.8DOWNGRADE

CVE-2024-0316 is a medium-severity flaw (CVSS 6.8) affecting endpoint security. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containment_notify/preview parameter, which could lead to a service outage.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	6.8 (Medium)
Attack vector	Local
Attack complexity	Low
Privileges needed	None
User interaction	None
EPSS exploit chance	0.3% (top 76%)
CISA exploited list	No
Weakness	CWE-460
Published	2024-01-15
Last modified	2026-06-17

Publisher (CNA): Spanish National Cybersecurity Institute, S.A. (INCIBE) · Vendor: fireeye

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2024-01-15 16:15 UTCPublished CVE record published
2026-06-17 06:53 UTCUpdated Record last modified

fireeye endpoint security DOWNGRADE

Affected: 5.2.0.958244

Fixed in: no fixed release known

Safe to downgrade to: a release before 5.2.0.958244

1. Check installed version

apt-cache policy endpoint-security || rpm -q endpoint-security || endpoint-security --version

2. No fixed release: DOWNGRADE to a release before 5.2.0.958244 (Debian / Ubuntu)

apt-cache madison endpoint-security sudo apt install endpoint-security=<VERSION_BEFORE_5.2.0.958244> sudo apt-mark hold endpoint-security

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list endpoint-security sudo dnf downgrade endpoint-security-<VERSION_BEFORE_5.2.0.958244> sudo dnf versionlock add endpoint-security

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2024-0316?

endpoint security: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2024-0316 being exploited?

CVE-2024-0316 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2024-0316 affect?

CVE-2024-0316 affects endpoint security. Severity is medium (CVSS 6.8). Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containment_notify/preview parameter, which

How urgent is CVE-2024-0316?

Priority 30/100. No elevated risk signals yet.

Related CVEs

CVE-2026-56152 MEDIUM 5.3 UPGRADE Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized information disclosure via Accessing Func
CVE-2026-13043 HIGH 8.8 UPGRADE A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint
CVE-2025-14963 HIGH 7.8 UPGRADE A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user acces
CVE-2024-3779 MEDIUM 6.1 UPGRADE UPGRADE Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an
CVE-2024-2224 HIGH 8.1 DOWNGRADE DOWNGRADE Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServ

References

← Back to latest CVEs