CVE-2023-43765

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-43765
Certain WithSecure products allow Denial of Service in the aeelf component. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.withsecure.com/en/support/security-advisories Vendor Advisory
https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn2 Broken Link
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:f-secure:linux_protection:12.0:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:linux_security_64:12.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:f-secure:atlant:1.0.35-1:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:a:f-secure:client_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:email_and_server_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:server_security:15.00:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:a:f-secure:client_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
History

26 Sep 2023, 14:52

Type Values Removed Values Added
CPE cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:atlant:1.0.35-1:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:email_and_server_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:linux_security_64:12.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:linux_protection:12.0:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:server_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:client_security:15.00:*:*:*:*:*:*:*
First Time F-secure
Linux
F-secure server Security
Microsoft
Microsoft windows
F-secure email And Server Security
F-secure elements Endpoint Protection
Linux linux Kernel
F-secure linux Security 64
Apple macos
Apple
F-secure linux Protection
F-secure atlant
F-secure client Security
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
References (MISC) https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn2 - (MISC) https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn2 - Broken Link
References (MISC) https://www.withsecure.com/en/support/security-advisories - (MISC) https://www.withsecure.com/en/support/security-advisories - Vendor Advisory
CWE NVD-CWE-noinfo

22 Sep 2023, 05:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-09-22 05:15

Updated : 2023-12-10 15:14

NVD link : CVE-2023-43765

Mitre link : CVE-2023-43765

CVE.ORG link : CVE-2023-43765

JSON object : View

Products Affected

f-secure

  • elements_endpoint_protection
  • server_security
  • linux_security_64
  • atlant
  • email_and_server_security
  • linux_protection
  • client_security

apple

  • macos

linux

  • linux_kernel

microsoft

  • windows
CWE
NVD-CWE-noinfo