What’s Vulnerable › Vulnerabilities

CVE-2021-44747: Denial-of-Service (DoS) Vulnerability

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-01 · updated 2026-06-17

Description

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine.

Affected products

• F-Secure All F-Secure Endpoint Protection products on Windows and Mac F-Secure Linux Security (32-bit) F-Secure Linux Se: before 2022-02-23_01 — fixed in 2022-02-23_01
• F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection Products for Windows: before 2022-02-23_01 — fixed in 2022-02-23_01
• F-Secure Internet Gatekeeper: through 2022-02-23_01
• F-Secure Linux Security: before 2022-02-23_01 — fixed in 2022-02-23_01
• F-Secure Security Cloud: before 2022-02-23_01 — fixed in 2022-02-23_01

How to fix

Upgrade to a fixed version: F-Secure All F-Secure Endpoint Protection products on Windows and Mac F-Secure Linux Security (32-bit) F-Secure Linux Se 2022-02-23_01; F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection Products for Windows 2022-02-23_01; F-Secure Linux Security 2022-02-23_01; F-Secure Security Cloud 2022-02-23_01. Check the vendor advisory for mitigations.

References

• https://www.f-secure.com/en/business/support-and-downloads/security-advisories
• https://www.f-secure.com/en/business/support-and-downloads/security-advisories

Get alerted when CVE-2021-44747 or the next vulnerability affects your stack