CVE-2022-28871

EUVD-2022-33308
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
F-SecureUSCNA
4.3 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
Affected Products (NVD)
VendorProductVersion
f-secureatlant
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28871
https://www.withsecure.com/en/support/security-advisories/cve-2022-28871
https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28871
https://www.withsecure.com/en/support/security-advisories/cve-2022-28871