CVE-2023-49322

Vulnerability

The vulnerability resides in the unpack handler of certain WithSecure products. When processing a specially crafted file, the unpack handler crashes, leading to a scanning engine crash [1]. This affects WithSecure Client Security 15, Server Security 15, Email and Server Security 15, Elements Endpoint Protection 17 and later, Client Security for Mac 15, Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0, Linux Protection 12.0, and Atlant 1.0.35-1.

Exploitation

An attacker can trigger the vulnerability remotely by sending a crafted file to the target product. No prior authentication or user interaction is required. The file is processed by the unpack handler, causing a crash [1].

Impact

Successful exploitation causes the scanning engine to crash, resulting in a denial of service. The security product becomes unavailable, potentially leaving the system unprotected [1].

Mitigation

WithSecure has acknowledged the vulnerability. A fix is expected in a future update. Users should monitor the advisory for updates. No workarounds are currently available [1].