CVE-2022-28874

Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.

Score

CVSS 3.1 7.5 High

Status

Modified - cve-notifications-us@f-secure.com

Published

2022-05-23

Last modified

2024-08-03

Weaknesses

CWE-787

Affected products

• Atlant (F-secure)
• Elements Endpoint Protection (F-secure)
• F-secure Endpoint Protection Products For Windows And Mac. F-secure Linux Security 32-bit. F-secure Linux Security 64. F-secure Atlant. Withsecure Cloud Protection For Salesforce Withsecure Collaboration Protection (F-secure)
• Linux Security (F-secure)
• Cloud Protection For Salesforce (Withsecure)
• Elements Collaboration Protection (Withsecure)

References

• https://www.f-secure.com/en/home/support/security-advisories
• https://www.withsecure.com/en/support/security-advisories