Vulnerability Description
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| F-Secure | Cloud Protection For Salesforce | All versions |
| F-Secure | Collaboration Protection | All versions |
| F-Secure | Elements Endpoint Protection | All versions |
| F-Secure | Internet Gatekeeper | - |
| F-Secure | Linux Security | All versions |
Related Weaknesses (CWE)
References
- https://www.f-secure.com/en/business/support-and-downloads/security-advisoriesVendor Advisory
- https://www.withsecure.com/en/support/security-advisoriesThird Party Advisory
- https://www.f-secure.com/en/business/support-and-downloads/security-advisoriesVendor Advisory
- https://www.withsecure.com/en/support/security-advisoriesThird Party Advisory
FAQ
What is CVE-2022-28886?
CVE-2022-28886 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can cra...
How severe is CVE-2022-28886?
CVE-2022-28886 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-28886?
Check the references section above for vendor advisories and patch information. Affected products include: F-Secure Cloud Protection For Salesforce, F-Secure Collaboration Protection, F-Secure Elements Endpoint Protection, F-Secure Internet Gatekeeper, F-Secure Linux Security.