DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
WithSecure Endpoint Protection: Schwachstellen ermöglichen Denial of Service
Advisory ansehen veröffentlicht 2023-09-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WithSecure Endpoint Protection ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-42525US | high7.5 | — | ||
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithS… | ||||
| CVE-2023-42524US | high7.5 | — | ||
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithS… | ||||
| CVE-2023-42523US | high7.5 | — | ||
Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSec… | ||||
| CVE-2023-42522US | high7.5 | — | ||
Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Server… | ||||
| CVE-2023-42521US | high7.5 | — | ||
Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client Security 15, WithSecure Server Security 15… | ||||
| CVE-2023-42526US | high7.5 | — | ||
Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Securit… | ||||
| CVE-2023-42520US | high7.5 | — | ||
Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 15… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- WID-SEC-W-2023-2364 - CSAF Versionself
- WID-SEC-2023-2364 - Portal Versionself
- WithSecure Security Notification vom 2023-09-14external
- WithSecure Security Notification vom 2023-09-14external
- WithSecure Security Notification vom 2023-09-14external
- WithSecure Security Notification vom 2023-09-14external
- WithSecure Security Notification vom 2023-09-14external
- WithSecure Security Notification vom 2023-09-14external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan