Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-28874 EUVD-2022-33311GHSA-jgvq-q2v6-99mj

Multiple Denial-of-Service (DoS) Vulnerabilities

Published May 23, 2022 · Updated Aug 3, 2024 · Assigned by F-SecureUS

Description

Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.

Affected products

VendorProductAffectedFixed
F-Secure F-Secure endpoint protection products for Windows and Mac. F-Secure Linux Security (32-bit). F-Secure Linux Security 64. F-Secure Atlant. WithSecure Cloud Protection for Salesforce & WithS All Version —

References