F-secure Linux Protection — known CVE vulnerabilities

Every CVE whose affected-product data names F-secure Linux Protection, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-43766 — CVSS 7.8 (high): Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. This affects WithSecure Client Security…
• CVE-2023-43761 — CVSS 7.5 (high): Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSecure Server Security…
• CVE-2023-43765 — CVSS 7.5 (high): Certain WithSecure products allow Denial of Service in the aeelf component. This affects WithSecure Client Security 15, WithSecure Server…
• CVE-2023-43760 — CVSS 7.5 (high): Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server…
• CVE-2023-43767 — CVSS 7.5 (high): Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Client Security 15…
• CVE-2023-49322 — CVSS 7.5 (high): Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash…
• CVE-2023-49321 — CVSS 5.3 (medium): Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang…