CVE-2021-33603 | Severity.io

Description

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine.

Related CPE's

Vulnerable

cloud_protection_for_salesforce

Vulnerable

elements_for_microsoft_365

Vulnerable

internet_gatekeeper

Vulnerable

Vulnerable

elements_endpoint_detection_and_response

Vulnerable

elements_endpoint_protection

Vulnerable

References

https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame

Vendor Advisory

https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33603

Vendor Advisory

https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame

Vendor Advisory

https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33603

Vendor Advisory

Weaknesses

[email protected]

Primary

NVD-CWE-noinfo

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

5.5 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-10-08T08:15:07.817Z

4 years ago

Last modified

2024-11-21T05:09:11.037Z

1 year ago