CVE-2022-28881: Denial-of-Service (DoS) Vulnerability

Published Aug 10, 2022

Updated

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the aerdl.dll component used in certain WithSecure products unpacker function crashes which leads to scanning engine crash. The exploit can be triggered remotely by an attacker.

Affected Software

10 affected components

F-Secure Elements Endpoint Detection And Response

F-Secure Elements Endpoint Protection

Apple macOS

Microsoft Windows

F-Secure Atlant

F-Secure Cloud Protection For Salesforce

F-Secure Elements Collaboration Protection

F-Secure Internet Gatekeeper

F-Secure Linux Security

F-Secure Linux Security 64

Remediation

Information

FIX No User action is required. The required fix has been published through automatic update channel with Capricorn database on 2022-07-29_13

Event History

Aug 10, 2022

CVE Published

via MITRE·04:03 PM

Data Sourced

via MITRE·04:03 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-28881?

CVE-2022-28881 is a Denial-of-Service (DoS) vulnerability in F-Secure Atlant.

How does CVE-2022-28881 impact the affected software?

CVE-2022-28881 can lead to a scanning engine crash in certain F-Secure products.

Which products are affected by CVE-2022-28881?

F-Secure Elements Endpoint Detection And Response, F-Secure Elements Endpoint Protection, F-Secure Atlant, F-Secure Cloud Protection For Salesforce, F-Secure Elements Collaboration Protection, F-Secure Internet Gatekeeper, F-Secure Linux Security, and F-Secure Linux Security 64 are affected by CVE-2022-28881.

What is the severity rating of CVE-2022-28881?

CVE-2022-28881 has a severity rating of 7.5 (high).

Where can I find more information about CVE-2022-28881?

You can find more information about CVE-2022-28881 in the F-Secure security advisories and WithSecure support security advisories.