WithSecure Client Security Scanning Engine infinite loop

Summaryinfo

A vulnerability marked as problematic has been reported in WithSecure Client Security, Server Security, Email and Server Security, Elements Endpoint Protection, Client Security for Mac, Linux Security, Linux Protection and Atlant. Affected is an unknown function of the component Scanning Engine. This manipulation causes infinite loop. This vulnerability is tracked as CVE-2023-42524. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability classified as problematic was found in WithSecure Client Security, Server Security, Email and Server Security, Elements Endpoint Protection, Client Security for Mac, Linux Security, Linux Protection and Atlant. Affected by this vulnerability is an unknown code of the component Scanning Engine. The manipulation with an unknown input leads to a infinite loop vulnerability. The CWE definition for the vulnerability is CWE-835. The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop. As an impact it is known to affect availability. The summary by CVE is:

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

The weakness was disclosed 09/18/2023. It is possible to read the advisory at withsecure.com. This vulnerability is known as CVE-2023-42524 since 09/11/2023. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1499 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-46957). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• WithSecure

Name

• Atlant
• Client Security
• Client Security for Mac
• Elements Endpoint Protection
• Email and Server Security
• Linux Protection
• Linux Security
• Server Security

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion