CVE-2022-28881

Denial-of-Service (DoS) Vulnerability

State
Published
Severity
4.3 Medium
Published
Aug 10, 2022
Updated
Aug 3, 2024
Reserved
Apr 8, 2022

Read the record on cve.org

Description

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker.

Scores

CVSSScoreVectorSource
3.14.3 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:LF-SecureUS

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security (32-bit) F-Secure Linux Security (64-bit) F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration ProtectionF-Secure and WithSecure
  • All VersionAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.