CVE-2022-28884: Denial-of-Service (DoS) Vulnerability

Published Sep 6, 2022

Updated

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine.

Affected Software

4 affected components

WithSecure Business Suite

WithSecure Elements Endpoint Protection

F-Secure Internet Gatekeeper

F-Secure Linux Security

Remediation

Information

FIX No User action is required. The required fix has been published through automatic update channel with Capricorn database on 2022-08-25_6

Event History

Sep 6, 2022

CVE Published

via MITRE·05:19 PM

Data Sourced

via MITRE·05:19 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this Denial-of-Service vulnerability?

The vulnerability ID for this Denial-of-Service vulnerability is CVE-2022-28884.

Which products are affected by this vulnerability?

The F-Secure Internet Gatekeeper, F-Secure Linux Security, WithSecure Business Suite, and WithSecure Elements Endpoint Protection products are affected by this vulnerability.

What is the severity of CVE-2022-28884?

The severity of CVE-2022-28884 is high, with a severity value of 7.5.

How does the vulnerability manifest?

The vulnerability manifests as a Denial-of-Service where the aerdl.dll may go into an infinite loop when unpacking PE files, potentially crashing the scanning engine.

How can I fix CVE-2022-28884?

To fix CVE-2022-28884, ensure that you have the latest patches and updates for the affected F-Secure and WithSecure products installed.