CVE-2022-28874: Multiple Denial-of-Service (DoS) Vulnerabilities
Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-28874?
CVE-2022-28874 is a Denial-of-Service vulnerability discovered in F-Secure Atlant and certain WithSecure products.
What is the severity of CVE-2022-28874?
The severity of CVE-2022-28874 is high, with a CVSS score of 7.5.
Which software are affected by CVE-2022-28874?
The affected software includes F-Secure Atlant, F-Secure Elements Endpoint Protection, F-Secure Linux Security, Withsecure Cloud Protection For Salesforce, and Withsecure Elements Collaboration Protection.
How does CVE-2022-28874 exploit work?
The exploit can be triggered remotely by an attacker using fuzzed PE32-bit files, causing memory corruption and heap buffer overflow, ultimately crashing the scanning engine.
How can I fix CVE-2022-28874?
To fix CVE-2022-28874, it is recommended to apply the latest security patches or updates provided by the software vendors F-Secure and WithSecure.