Lucene search

K
cve[email protected]CVE-2023-42522
HistorySep 18, 2023 - 7:15 a.m.

CVE-2023-42522

2023-09-1807:15:37
CWE-400
web.nvd.nist.gov
13
withsecure
products
remote crash
scanning engine
pe file
security vulnerability
cve-2023-42522

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

Affected configurations

NVD
Node
withsecureclient_securityMatch15
OR
withsecureelements_endpoint_protectionRange17
OR
withsecureemail_and_server_securityMatch15
OR
withsecureserver_securityMatch15
AND
microsoftwindowsMatch-
Node
withsecureclient_securityMatch15
OR
withsecureelements_endpoint_protectionRange17
AND
applemacosMatch-
Node
withsecurelinux_protectionMatch12.0
OR
withsecurelinux_security_64Match12.0
AND
linuxlinux_kernelMatch-
Node
withsecureatlantMatch1.0.35-1

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for CVE-2023-42522