Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-28882 EUVD-2022-33319GHSA-qj43-c67c-c7c5

Denial-of-Service (DoS) Vulnerability

Published Aug 23, 2022 · Updated Aug 3, 2024 · Assigned by F-SecureUS

Description

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker.

Affected products

VendorProductAffectedFixed
F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper With All Version —

References