Denial-of-Service (DoS) Vulnerability

Vulnerability

A denial-of-service vulnerability exists in the fsicapd component used in F-Secure and WithSecure endpoint protection products on Windows and Mac platforms [1][2]. When scanning large or fuzzed files, the component consumes excessive memory, leading to a crash of the scanning engine. All supported platforms for the affected products are vulnerable.

Exploitation

An attacker can remotely trigger the vulnerability by sending specially crafted large or fuzzed files to the scanning engine [1][2]. No authentication is required, and the attack can be executed without user interaction.

Impact

Successful exploitation results in a denial-of-service condition, causing the scanning engine to crash and potentially disrupting protection services [1][2]. No other impact (data disclosure or code execution) has been reported.

Mitigation

The fix has been released via automatic update as HydraLinux update 2022-04-12_01 [1]. No user action is required as the update is applied automatically. No known exploits in the wild have been observed [1][2].