CVE-2021-44747 : Vulnerability Insights and Analysis

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security, affecting various F-Secure products.

Understanding CVE-2021-44747

What is CVE-2021-44747?

A Denial-of-Service (DoS) vulnerability in F-Secure Linux Security can be exploited remotely leading to a crash when scanning specific files, causing Anti-Virus engine downtime.

The Impact of CVE-2021-44747

The vulnerability has a CVSS base score of 4.6 (Medium severity) and requires low privileges but user interaction. It can result in DoS of the Anti-Virus engine.

Technical Details of CVE-2021-44747

Vulnerability Description

A flaw in F-Secure Linux Security's Fmlib component can be triggered remotely by attackers, causing a crash during file scans.

Affected Systems and Versions

F-Secure endpoint protection products on Mac, F-Secure Linux Security (32-bit), F-Secure Linux Security 64, F-Secure Atlant, F-Secure Internet Gatekeeper, and F-Security Cloud.
All versions are affected.

Exploitation Mechanism

Attack Vector: Network
Attack Complexity: Low
Privileges Required: Low
User Interaction: Required
Scope: Unchanged
Confidentiality Impact: Low
Integrity Impact: None
Availability Impact: Low

Mitigation and Prevention

Immediate Steps to Take

No user action is required as a fix has been released through an automatic update channel.

Long-Term Security Practices

Regularly update security patches and software versions.
Implement network segmentation and access controls.

Patching and Updates

The fix for CVE-2021-44747 has been deployed through automatic updates with Pisces release 2022-02-23_01.