CVE-2022-28882medium

CVE-2022-28882: medium-severity vulnerability in F-Secure and WithSecure All F-Secure and…

Denial-of-Service (DoS) Vulnerability

Published · Updated

Follow this CVE+ Monitor All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security F-Secure Linux Security F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.5%
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Affected products
F-Secure and WithSecure · All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection
Related CVEs — F-Secure and WithSecure All F-Secure and…

In the same product, most dangerous first.

CVE-2022-28883LOWDenial-of-Service (DoS) VulnerabilityEPSS 0.6%CVE-2022-28881MEDIUMDenial-of-Service (DoS) VulnerabilityEPSS 0.5%