CVE-2022-28887

Published: Oct 12, 2022Modified: May 15, 2025

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This can lead to a possible scanning engine crash.

Affected (6)

Products: F Secure: Elements Endpoint Detection And Response, Elements Endpoint Protection, Atlant, Internet Gatekeeper, Linux Security, Linux Security 64

F Secure

6 products

Elements Endpoint Detection And Response

Elements Endpoint Protection

Configuration A

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
F Secure Elements Endpoint Detection And Response	All versions
F Secure Elements Endpoint Protection	All versions

Running on/with	Platform Versions
Apple Macos	All versions
Microsoft Windows	All versions

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
F Secure Atlant	All versions
F Secure Internet Gatekeeper	All versions
F Secure Linux Security	All versions
F Secure Linux Security 64	All versions

Related CWEs

CWE-404

Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.

References (4)

https://www.f-secure.com/en/business/support-and-downloads/security-advisories

Source: cve-notifications-us@f-secure.com

Vendor Advisory

https://www.withsecure.com/en/support/security-advisories

Source: cve-notifications-us@f-secure.com

Vendor Advisory

https://www.f-secure.com/en/business/support-and-downloads/security-advisories

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.withsecure.com/en/support/security-advisories

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.