Lucene search

K
nvd[email protected]NVD:CVE-2022-43665
HistoryFeb 02, 2023 - 10:15 a.m.

CVE-2022-43665

2023-02-0210:15:09
CWE-823
web.nvd.nist.gov
1
denial of service
vulnerability
estsoft alyac

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

20.7%

A denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can lead to killing target process. An attacker can provide a malicious file to trigger this vulnerability.

Affected configurations

Nvd
Node
estsoftalyacMatch2.5.8.645
VendorProductVersionCPE
estsoftalyac2.5.8.645cpe:2.3:a:estsoft:alyac:2.5.8.645:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

20.7%

Related for NVD:CVE-2022-43665