CVEvulnerability

CVE-2022-28882

7.5 HIGH Published 2022-08-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-835

Description

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker.

Affected configurations

• f-secure elements endpoint protection • f-secure atlant • f-secure cloud protection for salesforce • f-secure elements collaboration protection • f-secure internet gatekeeper • f-secure linux security • f-secure linux security 64

Related

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References