CVE-2021-33597: Denial-of-Service (DoS) Vulnerability

Published Aug 5, 2021

Updated

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine.

Affected Software

7 affected components

F-Secure Client Security

F-Secure Linux Security

F-Secure Business Suite

F-Secure Elements Endpoint Protection

Apple macOS

Microsoft Windows

Remediation

Information

The required fix has been published through an automatic update channel with Database "Capricorn update 2021-07-26_07".

Event History

Aug 5, 2021

CVE Published

via MITRE·07:38 PM

Data Sourced

via MITRE·07:38 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-33597?

CVE-2021-33597 is a Denial-of-Service (DoS) vulnerability discovered in F-Secure Atlant.

What is the severity of CVE-2021-33597?

The severity of CVE-2021-33597 is medium with a score of 5.5.

Which F-Secure products are affected by CVE-2021-33597?

F-Secure Client Security, F-Secure Linux Security, F-Secure Business Suite, and F-secure Elements Endpoint Protection are affected by CVE-2021-33597.

How can CVE-2021-33597 be exploited?

CVE-2021-33597 can be exploited remotely by an attacker.

What is the impact of a successful attack using CVE-2021-33597?

A successful attack using CVE-2021-33597 will result in a Denial-of-Service (DoS) of the affected F-Secure products.