CVE-2021-40837: A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can ...

Summary

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antiv...

What to do

Update f-secure atlant to version 2022-02-01_01 or later.
Update f-secure internet_gatekeeper to version 2022-02-01_01 or later.
Update f-secure linux_security to version 2022-02-01_01 or later.
Update f-secure security_cloud to version 2022-02-01_01 or later.
Update f-secure elements_endpoint_detection_and_response to version 2022-02-01_01 or later.
Update f-secure elements_endpoint_protection to version 2022-02-01_01 or later.

Affected software

Vendor	Product	Affected versions
f-secure	atlant	< 2022-02-01_01 `cpe:2.3:a:f-secure:atlant::::::::`
f-secure	internet_gatekeeper	< 2022-02-01_01 `cpe:2.3:a:f-secure:internet_gatekeeper::::::::`
f-secure	linux_security	< 2022-02-01_01 `cpe:2.3:a:f-secure:linux_security::::::::`
f-secure	security_cloud	< 2022-02-01_01 `cpe:2.3:a:f-secure:security_cloud::::::::`
f-secure	elements_endpoint_detection_and_response	< 2022-02-01_01 `cpe:2.3:a:f-secure:elements_endpoint_detection_and_response::::::::`
f-secure	elements_endpoint_protection	< 2022-02-01_01 `cpe:2.3:a:f-secure:elements_endpoint_protection::::::::`

Original advisory text

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can ...

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.

References

https://www.f-secure.com/en/business/support-and-downloads/security-advisories Vendor Advisory
https://www.f-secure.com/en/business/support-and-downloads/security-advisories/c... Vendor Advisory