CVE-2021-44747
Medium
Description
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine.
SeverityMedium
CVSS4.6
Exploit probability—
ProductF-secure Linux Security
PublishedMar 1, 2022
First seenMar 1, 2022
How to fix
Update
- f-secure linux_security2022-02-23_01 or later
- f-secure atlant2022-02-23_01 or later
- f-secure elements_endpoint_protection2022-02-23_01 or later
- f-secure security_cloud2022-02-23_01 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f-secure linux_security | v < 2022-02-23_01 | 2022-02-23_01 |
| f-secure atlant | v < 2022-02-23_01 | 2022-02-23_01 |
| f-secure elements_endpoint_protection | v < 2022-02-23_01 | 2022-02-23_01 |
| f-secure internet_gatekeeper | v ≤ 2022-02-23_01 | — |
| f-secure security_cloud | v < 2022-02-23_01 | 2022-02-23_01 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.