Vulnerability · Published Sep 6, 2022 · Assigned by F-SecureUS
CVE-2022-28884Denial-of-Service (DoS) Vulnerability
Medium 4.3
In plain English
A medium-severity security flaw in All F-Secure and WithSecure Endpoint Protection products for Windows and Mac running 32 bit operating system. F-Secure Linux Security 32 F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud from F-Secure and WithSecure. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.5%top 58.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine.
Affected products (as reported)
References
- https://www.withsecure.com/en/support/security-advisories x_refsource_MISC
- https://www.withsecure.com/en/expertise/people x_refsource_MISC