Lucene search

K
cvelistF-SecureUSCVELIST:CVE-2021-40836
HistoryDec 22, 2021 - 11:14 a.m.

CVE-2021-40836 Denial-of-Service (DoS) Vulnerability

2021-12-2211:14:42
F-SecureUS
www.cve.org
5
cve-2021-40836
denial-of-service
f-secure antivirus

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

EPSS

0.001

Percentile

23.6%

A vulnerability affecting F-Secure antivirus engine was discovered whereby scanning MS outlook .pst files can lead to denial-of-service. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.

CNA Affected

[
  {
    "product": "F-Secure endpoint protection products on Windows and Mac. F-Secure Linux Security (32-bit)  F-Secure Linux Security 64  F-Secure Atlant & F-Secure Internet Gatekeeper",
    "vendor": "F-Secure",
    "versions": [
      {
        "status": "affected",
        "version": "All Version "
      }
    ]
  }
]

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

EPSS

0.001

Percentile

23.6%

Related for CVELIST:CVE-2021-40836