F-secure vulnerabilities
We track 13 vulnerabilities in F-secure products across 16 products. 13 are rated high or critical, and none are known to be exploited. The most recent was published on November 22, 2024.
Latest F-secure vulnerabilities
- 7.8 High severity
Total: Improper Link Resolution Before File Access
F-Secure Total Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of F-Secure Total. User interaction on the part of an administrator is required to exploit this v
- 7.5 High severity
client_security: Loop with Unreachable Exit Condition
Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when processing an archive file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, W
- 7.5 High severity
Linux Protection: Uncontrolled Resource Consumption
Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later,
- 7.8 High severity
Linux Protection: Improper Privilege Management
Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and
- 7.5 High severity
Linux Protection: Loop with Unreachable Exit Condition
Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Sec
- 7.5 High severity
A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in…
A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit can be triggered remotely by an attacker.
- 7.5 High severity
Elements Endpoint Protection: Uncaught Exception
In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dll unpacker handler crashes. This can lead to a scanning engine crash, triggerable remotely by an attacker for denial of service.
- 7.5 High severity
All F-Secure and WithSecure Endpoint…: Improper Resource Shutdown or Release
Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash.
- 7.5 High severity
All F-Secure and WithSecure Endpoint…: Loop with Unreachable Exit Condition
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine.
- 7.5 High severity
All F-Secure and WithSecure Endpoint…: Loop with Unreachable Exit Condition
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an at
- 7.5 High severity
All F-Secure and WithSecure Endpoint…: Uncontrolled Resource Consumption
A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. The exploit can be triggered remotely by an attacker.
- 7.5 High severity
F-Secure endpoint protection products for…: Out-of-bounds Write
Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploi
- 7.5 High severity
All F-Secure Endpoint Protection products on…: Allocation of Resources Without Limits or Throttling
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit