CVE-2023-43765

Certain WithSecure products allow Denial of Service in the aeelf component. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.withsecure.com/en/support/security-advisories	Vendor Advisory
https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn2	Broken Link

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:f-secure:linux_protection:12.0:::::::*
	cpe:2.3:a:f-secure:linux_security_64:12.0:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:f-secure:atlant:1.0.35-1:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

OR	cpe:2.3:a:f-secure:client_security:15.00:::::::*
	cpe:2.3:a:f-secure:elements_endpoint_protection::::::::
	cpe:2.3:a:f-secure:email_and_server_security:15.00:::::::*
	cpe:2.3:a:f-secure:server_security:15.00:::::::*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

OR	cpe:2.3:a:f-secure:client_security:15.00:::::::*
	cpe:2.3:a:f-secure:elements_endpoint_protection::::::::

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-09-22 05:15

Updated : 2023-09-26 14:52

NVD link : CVE-2023-43765

Mitre link : CVE-2023-43765

CVE.ORG link : CVE-2023-43765

JSON object : View

Products Affected

f-secure

email_and_server_security
elements_endpoint_protection
linux_security_64
client_security
atlant
linux_protection
server_security

microsoft

windows

apple

macos

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2023-43765", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2023-09-22T05:15:09.793", "references": [{"url": "https://www.withsecure.com/en/support/security-advisories", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn2", "tags": ["Broken Link"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Certain WithSecure products allow Denial of Service in the aeelf component. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1."}, {"lang": "es", "value": "Ciertos productos WithSecure permiten la Denegaci\u00f3n de Servicio en el componente aeelf. Esto afecta a WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 y posteriores, WithSecure Client Security para Mac 15, WithSecure Elements Endpoint Protection para Mac 17 y posteriores, Linux Security 64 12.0, Linux Protection 12.0 y WithSecure Atlant (anteriormente F-Secure Atlant) 1.0.35-1."}], "lastModified": "2023-09-26T14:52:04.797", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f-secure:linux_protection:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96B5DD2D-9D5C-4475-8E8D-24950C7C5E84"}, {"criteria": "cpe:2.3:a:f-secure:linux_security_64:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BA4ED9C-9739-435C-940E-97D6B18F217A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f-secure:atlant:1.0.35-1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17C9517C-5EAD-4039-A80F-934D658143DC"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f-secure:client_security:15.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13507004-1DD0-4DB3-B152-DA23CE1317E9"}, {"criteria": "cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F24DCDA1-6736-4CAC-A626-5871A6FEB283", "versionStartIncluding": "17.0"}, {"criteria": "cpe:2.3:a:f-secure:email_and_server_security:15.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75B976BB-2359-472B-8A70-4B854C2E6749"}, {"criteria": "cpe:2.3:a:f-secure:server_security:15.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96BF356E-12D9-4E39-AFAE-E7B03C8D7700"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f-secure:client_security:15.00:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13507004-1DD0-4DB3-B152-DA23CE1317E9"}, {"criteria": "cpe:2.3:a:f-secure:elements_endpoint_protection:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F24DCDA1-6736-4CAC-A626-5871A6FEB283", "versionStartIncluding": "17.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}