CVE-2021-40836: Denial-of-Service (DoS) Vulnerability

Published Dec 22, 2021

Updated

A vulnerability affecting F-Secure antivirus engine was discovered whereby scanning MS outlook .pst files can lead to denial-of-service. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.

Affected Software

8 affected components

F-Secure Atlant

F-Secure Internet Gatekeeper

F-Secure Linux Security

F-Secure Linux Security 64

F-Secure Elements Endpoint Detection And Response

F-Secure Elements Endpoint Protection

Apple macOS

Microsoft Windows

Remediation

Information

FIX No User action is required. The required fix has been published through automatic update channel with Capricorn update 2021-12-13_07

Event History

Dec 22, 2021

CVE Published

via MITRE·11:14 AM

Data Sourced

via MITRE·11:14 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2021-40836.

What is the severity of CVE-2021-40836?

The severity of CVE-2021-40836 is medium with a severity value of 5.5.

How does CVE-2021-40836 affect F-Secure antivirus engine?

CVE-2021-40836 affects F-Secure antivirus engine by leading to denial-of-service when scanning MS Outlook .pst files.

Can CVE-2021-40836 be exploited remotely?

Yes, CVE-2021-40836 can be exploited remotely by an attacker.

What is the impact of a successful attack exploiting CVE-2021-40836?

A successful attack exploiting CVE-2021-40836 will result in denial-of-service of the antivirus engine.

Does CVE-2021-40836 affect Apple macOS or Microsoft Windows?

No, CVE-2021-40836 does not affect Apple macOS or Microsoft Windows.

Where can I find more information about CVE-2021-40836?

You can find more information about CVE-2021-40836 at the following link: [F-Secure Security Advisories](https://www.f-secure.com/en/business/support-and-downloads/security-advisories).