PT-2023-26888 · Ffri · Ffri Yarai Home/Business Edition+1

Published 2023-08-08 · Updated 2023-08-23 · CVE-2023-39341

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions FFRI yarai versions 3.4.0 through 3.5.0 FFRI yarai Home and Business Edition version 1.4.0 InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 through 3.2.2 Zerona / Zerona PLUS versions 3.2.32 through 3.2.36 ActSecure χ versions 3.4.0 through 3.5.0 Dual Safe Powered by FFRI yarai version 1.4.1 EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 through 3.5.0) EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 through 3.5.0)

Description The issue arises from improper handling of exceptional conditions, which may lead to a denial-of-service (DoS) condition.

Recommendations For FFRI yarai versions 3.4.0 through 3.5.0, update to a version that properly handles exceptional conditions. For FFRI yarai Home and Business Edition version 1.4.0, update to a version that properly handles exceptional conditions. For InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 through 3.2.2, update to a version that properly handles exceptional conditions. For Zerona / Zerona PLUS versions 3.2.32 through 3.2.36, update to a version that properly handles exceptional conditions. For ActSecure χ versions 3.4.0 through 3.5.0, update to a version that properly handles exceptional conditions. For Dual Safe Powered by FFRI yarai version 1.4.1, update to a version that properly handles exceptional conditions. For EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 through 3.5.0), update the bundled FFRI yarai to a version that properly handles exceptional conditions. For EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 through 3.5.0), update the bundled FFRI yarai to a version that properly handles exceptional conditions.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2023-39341

Affected Products

Ffri Yarai

Ffri Yarai Home/Business Edition

References · 12

• https://osv.dev/vulnerability/CVE-2023-39341 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39341 · Security Note
• https://ffri.jp/security-info/index.htm · Vendor Advisory
• https://t.me/cvenotify/56042 · Telegram Post
• https://sourcenext.com/support/i/2023/230718_01 · Note
• https://jvn.jp/en/jp/JVN42527152 · Note
• https://twitter.com/VulmonFeeds/status/1689151879341641728 · Twitter Post
• https://soliton.co.jp/support/zerona_notice_2023.html · Note
• https://skyseaclientview.net/news/230807_01 · Note
• https://twitter.com/TechFishNews/status/1689163747678711808 · Twitter Post
• https://support.nec.co.jp/View.aspx?id=3140109240 · Note
• https://t.me/cvenotify/57109 · Telegram Post