CVE-2023-49321

Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:f-secure:linux_protection:12.0:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:linux_security_64:12.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:f-secure:atlant:1.0.35-1:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:a:f-secure:client_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:email_and_server_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:server_security:15.00:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:a:f-secure:client_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

History

01 Dec 2023, 18:10

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
First Time F-secure server Security
Apple
Apple macos
Linux linux Kernel
F-secure elements Endpoint Protection
F-secure linux Protection
Linux
F-secure atlant
F-secure client Security
Microsoft
Microsoft windows
F-secure linux Security 64
F-secure email And Server Security
F-secure
References () https://www.withsecure.com/en/support/security-advisories/cve-2023-49321 - () https://www.withsecure.com/en/support/security-advisories/cve-2023-49321 - Vendor Advisory
CPE cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:linux_protection:12.0:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:atlant:1.0.35-1:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:email_and_server_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:linux_security_64:12.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:server_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:client_security:15.00:*:*:*:*:*:*:*

28 Nov 2023, 19:15

Type Values Removed Values Added
References
  • {'url': 'https://www.withsecure.com/en/support/security-advisories/cve-2023-01', 'name': 'https://www.withsecure.com/en/support/security-advisories/cve-2023-01', 'tags': [], 'refsource': ''}
  • () https://www.withsecure.com/en/support/security-advisories/cve-2023-49321 -

27 Nov 2023, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-27 00:15

Updated : 2023-12-01 18:10


NVD link : CVE-2023-49321

Mitre link : CVE-2023-49321


JSON object : View

Products Affected

f-secure

  • elements_endpoint_protection
  • server_security
  • linux_protection
  • client_security
  • email_and_server_security
  • atlant
  • linux_security_64

microsoft

  • windows

apple

  • macos

linux

  • linux_kernel