Skip to main content

Linux Protection CVE-2023-49321

MEDIUM
2023-11-27 cve@mitre.org
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low

Lifecycle Timeline

1
CVE Published
Nov 27, 2023 - 00:15 nvd
MEDIUM 5.3

DescriptionNVD

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1.

AnalysisAI

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1. Affected products include: F-Secure Linux Protection, F-Secure Linux Security 64, F-Secure Atlant, F-Secure Client Security, F-Secure Elements Endpoint Protection.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2023-43766 HIGH
7.8 Sep 22

Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. Rated high severity (CV

CVE-2023-49322 HIGH
7.5 Nov 27

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanni

CVE-2023-47264 HIGH
7.5 Nov 16

Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of ser

CVE-2023-47263 HIGH
7.5 Nov 16

Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. Ra

CVE-2023-43767 HIGH
7.5 Sep 22

Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. Rated high severity (CVSS 7.5

CVE-2023-43765 HIGH
7.5 Sep 22

Certain WithSecure products allow Denial of Service in the aeelf component. Rated high severity (CVSS 7.5), this vulnera

CVE-2023-43761 HIGH
7.5 Sep 22

Certain WithSecure products allow Denial of Service (infinite loop). Rated high severity (CVSS 7.5), this vulnerability

CVE-2023-43760 HIGH
7.5 Sep 22

Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. Rated high severity (CVSS 7.5), this vulnera

CVE-2023-42525 HIGH
7.5 Sep 18

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. Rated high severity

CVE-2023-42524 HIGH
7.5 Sep 18

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. Rated high severity

CVE-2023-42523 HIGH
7.5 Sep 18

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. Rated high severity (C

CVE-2023-42522 HIGH
7.5 Sep 18

Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. R

Share

CVE-2023-49321 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy