CVE-2021-40837
Medium
Description
A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.
SeverityMedium
CVSS4.6
Exploit probability—
ProductF-secure Atlant
PublishedFeb 9, 2022
First seenFeb 9, 2022
How to fix
Update
- f-secure atlant2022-02-01_01 or later
- f-secure internet_gatekeeper2022-02-01_01 or later
- f-secure linux_security2022-02-01_01 or later
- f-secure security_cloud2022-02-01_01 or later
- f-secure elements_endpoint_detection_and_response2022-02-01_01 or later
- f-secure elements_endpoint_protection2022-02-01_01 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f-secure atlant | v < 2022-02-01_01 | 2022-02-01_01 |
| f-secure internet_gatekeeper | v < 2022-02-01_01 | 2022-02-01_01 |
| f-secure linux_security | v < 2022-02-01_01 | 2022-02-01_01 |
| f-secure security_cloud | v < 2022-02-01_01 | 2022-02-01_01 |
| f-secure elements_endpoint_detection_and_response | v < 2022-02-01_01 | 2022-02-01_01 |
| f-secure elements_endpoint_protection | v < 2022-02-01_01 | 2022-02-01_01 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.