CVE-2022-28882: Denial-of-Service (DoS) Vulnerability

Published Aug 23, 2022

Updated

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker.

Affected Software

9 affected components

F-Secure Elements Endpoint Protection

Apple macOS

Microsoft Windows

F-Secure Atlant

F-Secure Cloud Protection For Salesforce

F-Secure Elements Collaboration Protection

F-Secure Internet Gatekeeper

F-Secure Linux Security

F-Secure Linux Security 64

Remediation

Information

FIX No User action is required. The required fix has been published through automatic update channel with Capricorn database on 2022-08-10_06

Event History

Aug 23, 2022

CVE Published

via MITRE·03:54 PM

Data Sourced

via MITRE·03:54 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-28882?

CVE-2022-28882 is a Denial-of-Service (DoS) vulnerability in F-Secure & WithSecure products that can cause the scanning engine to crash.

How does CVE-2022-28882 affect F-Secure Elements Endpoint Protection?

CVE-2022-28882 affects F-Secure Elements Endpoint Protection by putting the scanning engine at risk of a crash.

Can CVE-2022-28882 be exploited remotely?

Yes, CVE-2022-28882 can be exploited remotely by an attacker.

What is the severity of CVE-2022-28882?

CVE-2022-28882 has a severity rating of 7.5, indicating a high level of risk.

Is there a fix available for CVE-2022-28882?

It is recommended to update the affected F-Secure & WithSecure products to the latest version to mitigate CVE-2022-28882.