Vulnerability · Published Aug 23, 2022 · Assigned by F-SecureUS
CVE-2022-28883Denial-of-Service (DoS) Vulnerability
Low 3.5
In plain English
A low-severity security flaw in All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Clo from F-Secure and WithSecure. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Severity (CVSS 3.1)3.5Low
Exploit odds (30 days)0.6%top 51.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible scanning engine crash. The exploit can be triggered remotely by an attacker.
Affected products (as reported)
References
- https://www.withsecure.com/en/support/security-advisories x_refsource_MISC