CVE-2021-40837: Denial-of-Service (DoS) Vulnerability

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-02-09 · updated 2026-06-17

Description

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.

Affected products

F-Secure All F-Secure Endpoint Protection products on Windows and Mac F-Secure Linux Security (32-bit) F-Secure Linux Se: before 2022-02-01_01 — fixed in 2022-02-01_01
F-Secure Elements Endpoint Detection And Response: before 2022-02-01_01 — fixed in 2022-02-01_01
F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection Products for Windows: before 2022-02-01_01 — fixed in 2022-02-01_01
F-Secure Internet Gatekeeper: before 2022-02-01_01 — fixed in 2022-02-01_01
F-Secure Linux Security: before 2022-02-01_01 — fixed in 2022-02-01_01
F-Secure Security Cloud: before 2022-02-01_01 — fixed in 2022-02-01_01

How to fix

Upgrade to a fixed version: F-Secure All F-Secure Endpoint Protection products on Windows and Mac F-Secure Linux Security (32-bit) F-Secure Linux Se 2022-02-01_01; F-Secure Elements Endpoint Detection And Response 2022-02-01_01; F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection Products for Windows 2022-02-01_01; F-Secure Internet Gatekeeper 2022-02-01_01; F-Secure Linux Security 2022-02-01_01; F-Secure Security Cloud 2022-02-01_01. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-40837 or the next vulnerability affects your stack