Vulnerability · Published Jul 14, 2022 · Assigned by F-SecureUS
CVE-2022-28876Denial-of-Service (DoS) Vulnerability
Medium 4.3
In plain English
A medium-severity security flaw in All F-Secure & WithSecure endpoint protection products for Windows and Mac. F-Secure Linux Security (32-bit). F-Secure Linux Security (64-bit). F-Secure Atlant. WithSecure Cloud Protection for Sales from F-Secure. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.5%top 59.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. The exploit can be triggered remotely by an attacker.
Affected products (as reported)
References
- https://www.f-secure.com/en/business/support-and-downloads/security-advisories x_refsource_MISC
- https://www.withsecure.com/en/support/security-advisories x_refsource_MISC