CVE-2022-28886
Denial-of-Service (DoS) Vulnerability
Severity Score
5.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine
Se ha detectado una vulnerabilidad de denegación de servicio en los productos F-Secure y WithSecure en la que el archivo aerdl.so/aerdl.dll puede entrar en un bucle infinito cuando son desempaquetados archivos PE. Es posible que esto pueda bloquear el motor de escaneo
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-04-08 CVE Reserved
- 2022-09-23 CVE Published
- 2024-08-03 CVE Updated
- 2025-04-03 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.withsecure.com/en/support/security-advisories | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.f-secure.com/en/business/support-and-downloads/security-advisories | 2022-09-26 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| F-secure Search vendor "F-secure" | Cloud Protection For Salesforce Search vendor "F-secure" for product "Cloud Protection For Salesforce" | * | - |
Affected
| ||||||
| F-secure Search vendor "F-secure" | Collaboration Protection Search vendor "F-secure" for product "Collaboration Protection" | * | - |
Affected
| ||||||
| F-secure Search vendor "F-secure" | Elements Endpoint Protection Search vendor "F-secure" for product "Elements Endpoint Protection" | * | windows, x86 |
Affected
| ||||||
| F-secure Search vendor "F-secure" | Internet Gatekeeper Search vendor "F-secure" for product "Internet Gatekeeper" | - | - |
Affected
| ||||||
| F-secure Search vendor "F-secure" | Linux Security Search vendor "F-secure" for product "Linux Security" | * | x86 |
Affected
| ||||||