Lucene search

K
cve[email protected]CVE-2023-42525
HistorySep 18, 2023 - 7:15 a.m.

CVE-2023-42525

2023-09-1807:15:38
CWE-835
web.nvd.nist.gov
12
cve-2023-42525
withsecure
infinite loop
scanning engine
security vulnerability
nvd
products

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.7%

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

Affected configurations

NVD
Node
withsecureclient_securityMatch15
OR
withsecureelements_endpoint_protectionRange17
OR
withsecureemail_and_server_securityMatch15
OR
withsecureserver_securityMatch15
AND
microsoftwindowsMatch-
Node
withsecureclient_securityMatch15
OR
withsecureelements_endpoint_protectionRange17
AND
applemacosMatch-
Node
withsecurelinux_protectionMatch12.0
OR
withsecurelinux_security_64Match12.0
AND
linuxlinux_kernelMatch-
Node
withsecureatlantMatch1.0.35-1

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.7%

Related for CVE-2023-42525