WithSecure Client Security Scanning Engine infinite loop

Summaryinfo

A vulnerability described as problematic has been identified in WithSecure Client Security, Server Security, Email and Server Security, Elements Endpoint Protection, Client Security for Mac, Linux Security, Linux Protection and Atlant. Affected by this vulnerability is an unknown functionality of the component Scanning Engine. Such manipulation leads to infinite loop. This vulnerability is listed as CVE-2023-42525. The attack may be performed from remote. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in WithSecure Client Security, Server Security, Email and Server Security, Elements Endpoint Protection, Client Security for Mac, Linux Security, Linux Protection and Atlant. Affected by this issue is an unknown code block of the component Scanning Engine. The manipulation with an unknown input leads to a infinite loop vulnerability. Using CWE to declare the problem leads to CWE-835. The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop. Impacted is availability. CVE summarizes:

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

The weakness was presented 09/18/2023. The advisory is shared for download at withsecure.com. This vulnerability is handled as CVE-2023-42525 since 09/11/2023. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1499.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-46958). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• WithSecure

Name

• Atlant
• Client Security
• Client Security for Mac
• Elements Endpoint Protection
• Email and Server Security
• Linux Protection
• Linux Security
• Server Security

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion