Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-28881 EUVD-2022-33318GHSA-6hq3-f3rw-pvjc

Denial-of-Service (DoS) Vulnerability

Published Aug 10, 2022 · Updated Aug 3, 2024 · Assigned by F-SecureUS

Description

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker.

Affected products

VendorProductAffectedFixed
F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper With All Version —

References