CVE-2024-27359: High severity WithSecure Client Security vulnerability
Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when processing an archive file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27359?
CVE-2024-27359 is classified as a Denial of Service vulnerability due to the potential for an infinite loop in the engine scanner.
How do I fix CVE-2024-27359?
To address CVE-2024-27359, upgrade to the latest version of the affected WithSecure products provided by the vendor.
Which products are affected by CVE-2024-27359?
CVE-2024-27359 affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, and certain versions of WithSecure Elements Endpoint Protection.
What types of attacks can CVE-2024-27359 facilitate?
CVE-2024-27359 can facilitate a Denial of Service attack by causing the engine scanner to enter an infinite loop when processing specific archive files.
Is there any workaround for CVE-2024-27359?
Currently, there are no reliable workarounds for CVE-2024-27359 other than applying the available software updates from WithSecure.