CVE-2023-39341
Description
"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure χ versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0).
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ffri dual_safe | 1.4.1 | — |
| ffri ffri_yarai | 3.4.0 ≤ v ≤ 3.4.6, 1.4.0, 3.5.0 | — |
| soliton infotrace_mark_ii_malware_protection | 3.0.1 ≤ v ≤ 3.2.2 | — |
| soliton zerona | 3.2.32 ≤ v ≤ 3.2.36 | — |
| soliton zerona_plus | 3.2.32 ≤ v ≤ 3.2.36 | — |
| nec actsecure_x_managed_security_service | 3.4.0 ≤ v ≤ 3.4.6, 3.5.0 | — |
| skygroup edr_plus_pack | 3.4.0 ≤ v ≤ 3.4.6, 3.5.0 | — |
| skygroup edr_plus_pack_cloud | 3.4.0 ≤ v ≤ 3.4.6, 3.5.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.