CVE-2023-42526

Vulnerability

A denial-of-service vulnerability exists in multiple WithSecure products where a remote attacker can crash the scanning engine by providing specially crafted data files that trigger a decompression failure. Affected products include WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0, Linux Protection 12.0, and WithSecure Atlant 1.0.35-1 [1].

Exploitation

An attacker can remotely send a crafted data file to a vulnerable system, which when processed by the scanning engine's decompression routine, causes an unhandled exception leading to a crash. No authentication or user interaction is required; the attacker only needs network access to deliver the malicious file [1].

Impact

Successful exploitation results in a crash of the scanning engine, leading to a denial-of-service condition. The affected system may be unable to scan files until the engine is restarted, but no data corruption or privilege escalation is indicated [1].

Mitigation

WithSecure has not disclosed a specific fix version in the available references [1]. Affected users should monitor the vendor's security advisories for updates and consider applying any released patches or workarounds as they become available.