CVE-2023-42520

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.withsecure.com/en/support/security-advisories	Vendor Advisory
https://www.withsecure.com/en/support/security-advisories	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:withsecure:client_security:15:::::::*
	cpe:2.3:a:withsecure:elements_endpoint_protection::::::::
	cpe:2.3:a:withsecure:email_and_server_security:15:::::::*
	cpe:2.3:a:withsecure:server_security:15:::::::*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

OR	cpe:2.3:a:withsecure:client_security:15:::::::*
	cpe:2.3:a:withsecure:elements_endpoint_protection::::::::

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

OR	cpe:2.3:a:withsecure:linux_protection:12.0:::::::*
	cpe:2.3:a:withsecure:linux_security_64:12.0:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:withsecure:atlant:1.0.35-1:*:*:*:*:*:*:*

History

21 Nov 2024, 08:22

Type	Values Removed	Values Added
References	~~() https://www.withsecure.com/en/support/security-advisories - Vendor Advisory~~	() https://www.withsecure.com/en/support/security-advisories - Vendor Advisory

Information

Published : 2023-09-18 06:15

Updated : 2024-11-21 08:22

NVD link : CVE-2023-42520

Mitre link : CVE-2023-42520

CVE.ORG link : CVE-2023-42520

JSON object : View

Products Affected

withsecure

email_and_server_security
server_security
linux_security_64
elements_endpoint_protection
client_security
linux_protection
atlant

linux

linux_kernel

microsoft

windows

apple

macos

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2023-42520", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2023-09-18T06:15:08.060", "references": [{"url": "https://www.withsecure.com/en/support/security-advisories", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.withsecure.com/en/support/security-advisories", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1."}, {"lang": "es", "value": "Ciertos productos WithSecure permiten un bloqueo remoto de un motor de escaneo mediante el desempaquetado de archivos de datos manipulados. Esto afecta a WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email y Server Security 15, WithSecure Elements Endpoint Protection 17 y versiones posteriores, WithSecure Client Security para Mac 15, WithSecure Elements Endpoint Protection para Mac 17 y versiones posteriores, Linux Security 64 12.0, Linux Protection 12.0 y WithSecure Atlant (anteriormente F-Secure Atlant) 1.0.35-1. "}], "lastModified": "2024-11-21T08:22:42.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:withsecure:client_security:15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1755AB17-E9C9-4616-98B4-843B75668CA4"}, {"criteria": "cpe:2.3:a:withsecure:elements_endpoint_protection:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B92950AC-F16B-4935-93D8-39E6DC6B0B5A", "versionStartIncluding": "17"}, {"criteria": "cpe:2.3:a:withsecure:email_and_server_security:15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E1B31DD-3C88-4826-8E24-588FED197C5D"}, {"criteria": "cpe:2.3:a:withsecure:server_security:15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "015D02AD-F46F-46DF-9CD8-E0DB78CE17DD"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:withsecure:client_security:15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1755AB17-E9C9-4616-98B4-843B75668CA4"}, {"criteria": "cpe:2.3:a:withsecure:elements_endpoint_protection:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B92950AC-F16B-4935-93D8-39E6DC6B0B5A", "versionStartIncluding": "17"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:withsecure:linux_protection:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCA1C33E-551B-4CBF-A0C0-663A32611D29"}, {"criteria": "cpe:2.3:a:withsecure:linux_security_64:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACBC6F42-8F62-4599-83F3-9E9147D46129"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:withsecure:atlant:1.0.35-1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BA1712F-D879-44CA-BCAD-49D6533D1E8E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}