CVE-2023-43767

moderate-risk
Published 2023-09-22

Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

Do I need to act?

-
0.21% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (7)

Linux Protection
Linux Security 64
Client Security
Email And Server Security
Server Security

Affected Vendors

F-Secure

References (4)

Vendor Advisory https://www.withsecure.com/en/support/security-advisories
Broken Link https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn3
Vendor Advisory https://www.withsecure.com/en/support/security-advisories
Broken Link https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn3
41
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 1/34 · Minimal
Exposure 14/34 · Moderate