PT-2023-30400 · Withsecure · Withsecure Linux Security 64+7

Faty420

·

Published

2023-11-16

·

Updated

2023-12-01

·

CVE-2023-47264

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions WithSecure Client Security version 15 WithSecure Server Security version 15 WithSecure Email and Server Security version 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac version 15 WithSecure Elements Endpoint Protection for Mac versions 17 and later WithSecure Linux Security 64 version 12.0 WithSecure Linux Protection version 12.0 WithSecure Atlant versions 15 and later
Description The issue is a buffer over-read that may cause a denial of service (DoS) when processing certain fuzz file types.
Recommendations For WithSecure Client Security version 15, update to a fixed version when available. For WithSecure Server Security version 15, update to a fixed version when available. For WithSecure Email and Server Security version 15, update to a fixed version when available. For WithSecure Elements Endpoint Protection versions 17 and later, update to a fixed version when available. For WithSecure Client Security for Mac version 15, update to a fixed version when available. For WithSecure Elements Endpoint Protection for Mac versions 17 and later, update to a fixed version when available. For WithSecure Linux Security 64 version 12.0, update to a fixed version when available. For WithSecure Linux Protection version 12.0, update to a fixed version when available. For WithSecure Atlant versions 15 and later, update to a fixed version when available.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2023-47264

Affected Products

Withsecure Atlant
Withsecure Client Security
Withsecure Client Security For Mac
Withsecure Elements Endpoint Protection
Withsecure Email/Server Security
Withsecure Linux Protection
Withsecure Linux Security 64
Withsecure Server Security