CVE-2023-43767
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
34.3%
Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| f-secure | linux_protection | 12.0 | cpe:2.3:a:f-secure:linux_protection:12.0:*:*:*:*:*:*:* |
| f-secure | linux_security_64 | 12.0 | cpe:2.3:a:f-secure:linux_security_64:12.0:*:*:*:*:*:*:* |
| linux | linux_kernel | - | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
| f-secure | atlant | 1.0.35-1 | cpe:2.3:a:f-secure:atlant:1.0.35-1:*:*:*:*:*:*:* |
| f-secure | client_security | 15.00 | cpe:2.3:a:f-secure:client_security:15.00:*:*:*:*:*:*:* |
| f-secure | elements_endpoint_protection | * | cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:* |
| f-secure | email_and_server_security | 15.00 | cpe:2.3:a:f-secure:email_and_server_security:15.00:*:*:*:*:*:*:* |
| f-secure | server_security | 15.00 | cpe:2.3:a:f-secure:server_security:15.00:*:*:*:*:*:*:* |
| microsoft | windows | - | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
| apple | macos | - | cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* |
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
34.3%