CVE Vulnerabilities

CVE-2021-40837

Published: Feb 09, 2022 | Modified: Feb 11, 2022
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.

Affected Software

Name Vendor Start Version End Version
Atlant F-secure * 2022-02-01_01 (excluding)
Internet_gatekeeper F-secure * 2022-02-01_01 (excluding)
Linux_security F-secure * 2022-02-01_01 (excluding)
Security_cloud F-secure * 2022-02-01_01 (excluding)

References