CVE-2022-28887mediumCWE-404

Multiple Denial of Service Vulnerability

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.4%

exploitation probability

0.4%top 66% of all CVEs

observed exploitation

nono source reports it

Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash.

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

Affected products

F-Secure and WithSecure · All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper

References

https://www.f-secure.com/en/business/support-and-downloads/security-advisories https://www.withsecure.com/en/support/security-advisories