Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security update CVE-2024-45526 detected as malware by CrowdStrike Falcon Sensor #2842

Open
3 of 5 tasks
rodolfo-chacon opened this issue Nov 13, 2024 · 3 comments
Open
3 of 5 tasks
Assignees

Comments

@rodolfo-chacon
Copy link

rodolfo-chacon commented Nov 13, 2024

Type of issue

  • Bug
  • Enhancement
  • Compliance
  • Question
  • Help wanted

Current Behavior

Upgrading version from 1.5.374.36 to 1.5.374.70 is causing our antivirus software to deem our builds as malware. We attempted upgrading to later versions, leading to the same results.

Expected Behavior

I am expecting our builds not to be quarantined by our antivirus software.

Steps To Reproduce

No response

Environment

- OS: Windows 10
- Environment:
- Runtime:
- Nuget Version: 1.5.374.70
- Component:
- Server:
- Client:

Anything else?

Falcon Sensor-CSFalconService/Operational:

A file was quarantined because malicious behavior was detected.

I ran further tests and found the following issue, not sure if this is related to quarantine:

Opc.Ua.Security.Certificates.csproj : error NU1903: Warning As Error: Package 'System.Formats.As
n1' 8.0.0 has a known high severity vulnerability, GHSA-447r-wph3-92pm

@romanett
Copy link
Contributor

@rodolfo-chacon Does upgrading to the latest Version 1.5.374.126 solve this issue?

@rodolfo-chacon
Copy link
Author

Greetings @romanett, I've re-run all tests and still experiencing same issues with latest release 1.5.374.126. We are trying to collect more logs for additional details.

image

@romanett
Copy link
Contributor

@rodolfo-chacon we recommend to put the wohl project/solution into a Virus Scanner excluded folder.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants