PT-2022-19275 · F Secure · F-Secure Atlant

Antti Levomäki + 1 · Published 2022-04-25 · Updated 2023-08-08 · CVE-2022-28871

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions F-Secure Atlant (affected versions not specified)

Description A Denial-of-Service (DoS) issue was discovered in the fsicapd component used in certain F-Secure products. When scanning larger packages or fuzzed files, the component consumes too much memory, which can eventually crash the scanning engine. This issue can be triggered remotely by an attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2022-28871

Affected Products

F-Secure Atlant

References · 5

• https://f-secure.com/en/home/support/security-advisories/cve-2022-28871 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28871 · Security Note
• https://t.me/cvenotify/29878 · Telegram Post
• https://t.me/cvenotify/29720 · Telegram Post
• https://withsecure.com/en/support/security-advisories/cve-2022-28871 · Note