CVE-2023-49321

27.11.2023, 00:15

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 25%

Vendor	Product	Version
f-secure	linux_protection	12.0
f-secure	linux_security_64	12.0
f-secure	atlant	1.0.35-1
f-secure	client_security	15.00
f-secure	elements_endpoint_protection	17.0 ≤
f-secure	email_and_server_security	15.00
f-secure	server_security	15.00
f-secure	client_security	15.00
f-secure	elements_endpoint_protection	17.0 ≤

𝑥

= Vulnerable software versions

References

https://www.withsecure.com/en/support/security-advisories/cve-2023-49321