CVE-2020-9342: Medium severity F-Secure Cloud Protection For Salesforce Linux Kernel vulnerability
The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
F-Secure AV parsing engine (Cloud Protection For Salesforce, Email and Server Security; Internet GateKeeper)to a version that resolves this vulnerability.Fixed in 17.0.605.474
Event History
Frequently Asked Questions
What is CVE-2020-9342?
CVE-2020-9342 is a vulnerability in the F-Secure AV parsing engine that allows virus-detection bypass via crafted Compression Method data in a GZIP archive.
Which software versions are affected by CVE-2020-9342?
Versions before 17.0.605.474 (on Linux) of F-Secure Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper are affected by CVE-2020-9342.
What is the severity of CVE-2020-9342?
The severity of CVE-2020-9342 is medium with a severity value of 5.5.
How can the virus-detection bypass be achieved in CVE-2020-9342?
The virus-detection bypass can be achieved by using crafted Compression Method data in a GZIP archive.
Is there a fix available for CVE-2020-9342?
Yes, the fix for CVE-2020-9342 is to update to version 17.0.605.474 or later of F-Secure Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.