CVEvulnerability
CVE-2023-42526
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-09-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-400
Description
Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.
Affected configurations
• withsecure client security 15
• withsecure elements endpoint protection (>= 17)
• withsecure email and server security 15
• withsecure server security 15
• withsecure linux protection 12.0
• withsecure linux security 64 12.0
• withsecure atlant 1.0.35-1
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- https://www.withsecure.com/en/support/security-advisories Vendor Advisory
- https://www.withsecure.com/en/support/security-advisories Vendor Advisory