A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.
References
Link | Resource |
---|---|
https://www.f-secure.com/en/business/support-and-downloads/security-advisories | Vendor Advisory |
https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-40837 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
AND |
|
History
11 Feb 2022, 20:54
Type | Values Removed | Values Added |
---|---|---|
CWE | NVD-CWE-noinfo | |
CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 5.3 |
First Time |
Microsoft windows
Microsoft Apple macos F-secure linux Security F-secure security Cloud F-secure Apple F-secure atlant F-secure elements Endpoint Protection F-secure internet Gatekeeper F-secure elements Endpoint Detection And Response |
|
References | (MISC) https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-40837 - Vendor Advisory | |
References | (MISC) https://www.f-secure.com/en/business/support-and-downloads/security-advisories - Vendor Advisory | |
CPE | cpe:2.3:a:f-secure:internet_gatekeeper:*:*:*:*:*:*:*:* cpe:2.3:a:f-secure:linux_security:*:*:*:*:*:*:*:* cpe:2.3:a:f-secure:elements_endpoint_detection_and_response:*:*:*:*:*:*:*:* cpe:2.3:a:f-secure:security_cloud:*:*:*:*:*:*:*:* cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:f-secure:atlant:*:*:*:*:*:*:*:* |
09 Feb 2022, 13:47
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-02-09 13:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-40837
Mitre link : CVE-2021-40837
CVE.ORG link : CVE-2021-40837
JSON object : View
Products Affected
f-secure
- elements_endpoint_detection_and_response
- linux_security
- atlant
- security_cloud
- internet_gatekeeper
- elements_endpoint_protection
microsoft
- windows
apple
- macos
CWE