Lucene search

K
cve[email protected]CVE-2023-43761
HistorySep 22, 2023 - 5:15 a.m.

CVE-2023-43761

2023-09-2205:15:09
CWE-835
web.nvd.nist.gov
13
cve-2023-43761
withsecure
denial of service
infinite loop
security
vulnerability
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

Affected configurations

NVD
Node
f-securelinux_protectionMatch12.0
OR
f-securelinux_security_64Match12.0
AND
linuxlinux_kernelMatch-
Node
f-secureatlantMatch1.0.35-1
Node
f-secureclient_securityMatch15.00
OR
f-secureelements_endpoint_protectionRange17.0
OR
f-secureemail_and_server_securityMatch15.00
OR
f-secureserver_securityMatch15.00
AND
microsoftwindowsMatch-
Node
f-secureclient_securityMatch15.00
OR
f-secureelements_endpoint_protectionRange17.0
AND
applemacosMatch-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

Related for CVE-2023-43761