Lucene search

[email protected]CVE-2023-43760

HistorySep 22, 2023 - 5:15 a.m.

CVE-2023-43760

2023-09-2205:15:09

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2023-43760

withsecure

dos

vulnerability

pe32

nvd

security

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

15.9%

JSON

Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

CPENameOperatorVersion
f-secure:client_securityf-secure client securityeq15.00
f-secure:elements_endpoint_protectionf-secure elements endpoint protectioneq*
f-secure:elements_endpoint_protectionf-secure elements endpoint protectioneq2022-02-01_01
f-secure:email_and_server_securityf-secure email and server securityeq15.00
f-secure:server_securityf-secure server securityeq15.00

CPE	Name	Operator	Version
f-secure:client_security	f-secure client security	eq	15.00
f-secure:elements_endpoint_protection	f-secure elements endpoint protection	eq	*
f-secure:elements_endpoint_protection	f-secure elements endpoint protection	eq	2022-02-01_01
f-secure:email_and_server_security	f-secure email and server security	eq	15.00
f-secure:server_security	f-secure server security	eq	15.00

References

www.withsecure.com/en/support/security-advisories

www.withsecure.com/en/support/security-advisories/cve-2023-nnn6

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

15.9%

JSON

Related for CVE-2023-43760

prion1 cvelist1