CVE-2021-33599: Denial-of-Service (DoS) Vulnerability

Published Sep 7, 2021

Updated

A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service (infinite loop and freezes AV engine scanner). The vulnerability can be exploit remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine.

Affected Software

6 affected components

F-Secure Atlant

F-Secure Cloud Protection For Salesforce

F-Secure Linux Security

F-Secure Elements Endpoint Protection

Apple macOS

Microsoft Windows

Remediation

Information

FIX No User action is required. The required fix has been published through automatic update channel with Capricorn update 2021-08-25_04

Event History

Sep 7, 2021

CVE Published

via MITRE·12:12 PM

Data Sourced

via MITRE·12:12 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-33599?

CVE-2021-33599 is a vulnerability affecting F-Secure Antivirus engine whereby scanning a WIM archive file can lead to denial-of-service (infinite loop and freezes AV engine scanner).

How can CVE-2021-33599 be exploited?

CVE-2021-33599 can be exploited remotely by an attacker.

What is the severity of CVE-2021-33599?

CVE-2021-33599 has a severity rating of 5.5 (medium).

Which software is affected by CVE-2021-33599?

F-Secure Atlant, F-Secure Cloud Protection For Salesforce, F-Secure Linux Security, and F-Secure Elements Endpoint Protection are affected by CVE-2021-33599.

How do I fix CVE-2021-33599?

Update your F-Secure antivirus software to the latest version available to address CVE-2021-33599.