CVE-2023-43761

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-43761
Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.withsecure.com/en/support/security-advisories Vendor Advisory
https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn5 Broken Link
https://www.withsecure.com/en/support/security-advisories Vendor Advisory
https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn5 Broken Link
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:f-secure:linux_protection:12.0:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:linux_security_64:12.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:f-secure:atlant:1.0.35-1:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:a:f-secure:client_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:email_and_server_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:server_security:15.00:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:a:f-secure:client_security:15.00:*:*:*:*:*:*:*
cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
History

21 Nov 2024, 08:24

Type Values Removed Values Added
References () https://www.withsecure.com/en/support/security-advisories - Vendor Advisory () https://www.withsecure.com/en/support/security-advisories - Vendor Advisory
References () https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn5 - Broken Link () https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn5 - Broken Link
Information

Published : 2023-09-22 05:15

Updated : 2024-11-21 08:24

NVD link : CVE-2023-43761

Mitre link : CVE-2023-43761

CVE.ORG link : CVE-2023-43761

JSON object : View

Products Affected

f-secure

  • email_and_server_security
  • linux_security_64
  • server_security
  • elements_endpoint_protection
  • client_security
  • linux_protection
  • atlant

linux

  • linux_kernel

microsoft

  • windows

apple

  • macos
CWE
CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')