What’s Vulnerable › Vulnerabilities

CVE-2020-9342

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-22 · updated 2026-06-17
• Weakness: CWE-436

Description

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.

Affected products

• F-Secure Cloud Protection For Salesforce: before 17.0.605.474 — fixed in 17.0.605.474
• F-Secure Email And Server Security: before 17.0.605.474 — fixed in 17.0.605.474
• F-Secure Internet Gatekeeper: before 17.0.605.474 — fixed in 17.0.605.474

How to fix

Upgrade to a fixed version: F-Secure Cloud Protection For Salesforce 17.0.605.474; F-Secure Email And Server Security 17.0.605.474; F-Secure Internet Gatekeeper 17.0.605.474. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/156506/F-SECURE-Generic-Malformed-Container-Bypass.html
• http://seclists.org/fulldisclosure/2020/Feb/33
• https://blog.zoller.lu/p/tzo-16-2020-f-secure-generic-malformed.html
• https://seclists.org/bugtraq/2020/Feb/33
• http://packetstormsecurity.com/files/156506/F-SECURE-Generic-Malformed-Container-Bypass.html
• http://seclists.org/fulldisclosure/2020/Feb/33
• https://blog.zoller.lu/p/tzo-16-2020-f-secure-generic-malformed.html
• https://seclists.org/bugtraq/2020/Feb/33

Get alerted when CVE-2020-9342 or the next vulnerability affects your stack