What is CVE-2021-44747?

CVE-2021-44747 is a medium-severity vulnerability in F-Secure Atlant. CVSS score: 4.6/10. Published 2022-03-01.

How severe is CVE-2021-44747?

Medium severity. CVSS v3 base score is 4.6 out of 10.

Vulnerability in F-Secure Atlant

CVE-2021-44747

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine.

EPSS: 0.006 (48.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L.

Affected products

F-secure Atlant
F-secure Elements_endpoint_protection
F-secure Endpoint Protection Products On Mac, Linux Security (32-bit), 64, Atlant, Internet Gatekeeper & Cloud — versions All Version
F-secure Internet_gatekeeper
F-secure Linux_security
F-secure Security_cloud

References

cve-notifications-us@f-secure.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-44747?: CVE-2021-44747 is a medium-severity vulnerability in F-Secure Atlant. CVSS score: 4.6/10. Published 2022-03-01.
How severe is CVE-2021-44747?: Medium severity. CVSS v3 base score is 4.6 out of 10.