CVE-2022-28881

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://www.f-secure.com/en/business/support-and-downloads/security-advisories	Vendor Advisory
https://www.withsecure.com/en/support/security-advisories	Vendor Advisory
https://www.f-secure.com/en/business/support-and-downloads/security-advisories	Vendor Advisory
https://www.withsecure.com/en/support/security-advisories	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:f-secure:elements_endpoint_detection_and_response::::::::
	cpe:2.3:a:f-secure:elements_endpoint_protection::::::::

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:f-secure:atlant::::::::
	cpe:2.3:a:f-secure:cloud_protection_for_salesforce::::::::
	cpe:2.3:a:f-secure:elements_collaboration_protection::::::::
	cpe:2.3:a:f-secure:internet_gatekeeper::::::::
	cpe:2.3:a:f-secure:linux_security:::::::x86:*
	cpe:2.3:a:f-secure:linux_security_64::::::::

History

No history.

Information

Published : 2022-08-10 20:15

Updated : 2024-11-21 06:58

NVD link : CVE-2022-28881

Mitre link : CVE-2022-28881

CVE.ORG link : CVE-2022-28881

JSON object : View

Products Affected

f-secure

linux_security_64
linux_security
atlant
elements_endpoint_detection_and_response
elements_collaboration_protection
internet_gatekeeper
elements_endpoint_protection
cloud_protection_for_salesforce

apple

macos

microsoft

windows

CWE

NVD-CWE-noinfo

{"id": "CVE-2022-28881", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve-notifications-us@f-secure.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 0.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-08-10T20:15:32.953", "references": [{"url": "https://www.f-secure.com/en/business/support-and-downloads/security-advisories", "tags": ["Vendor Advisory"], "source": "cve-notifications-us@f-secure.com"}, {"url": "https://www.withsecure.com/en/support/security-advisories", "tags": ["Vendor Advisory"], "source": "cve-notifications-us@f-secure.com"}, {"url": "https://www.f-secure.com/en/business/support-and-downloads/security-advisories", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.withsecure.com/en/support/security-advisories", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker."}, {"lang": "es", "value": "Se ha detectado una vulnerabilidad de Denegaci\u00f3n de Servicio (DoS) en F-Secure Atlant por la que el componente aerdl.dll usado en determinados productos WithSecure es bloqueado, lo que conlleva a un bloqueo del motor de escaneo. La explotaci\u00f3n puede ser desencadenada remotamente por un atacante"}], "lastModified": "2024-11-21T06:58:07.600", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f-secure:elements_endpoint_detection_and_response:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F97045C-E576-49D3-9630-072E26F7D64F"}, {"criteria": "cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DFC1F94-8A8B-42E2-887B-EE8FB3C9130D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f-secure:atlant:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C97DC3C-1B63-4B57-8C62-ACD77D0A3E71"}, {"criteria": "cpe:2.3:a:f-secure:cloud_protection_for_salesforce:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31ECCE87-B67E-4CA7-91E6-8E71CEA6DA21"}, {"criteria": "cpe:2.3:a:f-secure:elements_collaboration_protection:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B107FE0-0F9E-4021-917F-1224F2619339"}, {"criteria": "cpe:2.3:a:f-secure:internet_gatekeeper:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88F6E1F2-02DA-48EE-B127-4933CCC80C5C"}, {"criteria": "cpe:2.3:a:f-secure:linux_security:*:*:*:*:*:*:x86:*", "vulnerable": true, "matchCriteriaId": "F0152E70-F7A9-4785-8A43-78472F9A2C13"}, {"criteria": "cpe:2.3:a:f-secure:linux_security_64:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "360DBC2B-2B93-461E-90C6-60C55FBD87B8"}], "operator": "OR"}]}], "sourceIdentifier": "cve-notifications-us@f-secure.com"}