{"id":"CVE-2022-28882","aliases":["EUVD-2022-33319","GHSA-qj43-c67c-c7c5"],"status":"published","title":"Denial-of-Service (DoS) Vulnerability","description":"A Denial-of-Service (DoS) vulnerability was discovered in F-Secure \u0026 WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00467,"percentile":0.40748,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-835"],"published":"2022-08-23T15:54:02Z","modified":"2026-06-17T04:39:16Z","products":[{"vendor":"f-secure","product":"atlant"},{"vendor":"f-secure","product":"cloud_protection_for_salesforce"},{"vendor":"f-secure","product":"elements_collaboration_protection"},{"vendor":"f-secure","product":"elements_endpoint_protection"},{"vendor":"f-secure","product":"internet_gatekeeper"},{"vendor":"f-secure","product":"linux_security"},{"vendor":"f-secure","product":"linux_security_64"},{"vendor":"f-secure and withsecure","product":"all f-secure and withsecure endpoint protection products for windows \u0026 mac f-secure linux security (32-bit) f-secure linux security (64-bit) f-secure atlant f-secure internet gatekeeper withsecure cloud protection for salesforce withsecure collaboration protection"}],"references":[{"url":"https://www.withsecure.com/en/support/security-advisories","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28882"},{"url":"https://github.com/advisories/GHSA-qj43-c67c-c7c5"}],"sources":{"cve":[{"id":"CVE-2022-28882","title":"Denial-of-Service (DoS) Vulnerability","description":"A Denial-of-Service (DoS) vulnerability was discovered in F-Secure \u0026 WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker.","status":"published","published":"2022-08-23T15:54:02Z","modified":"2024-08-03T06:03:53.163Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:39.233406Z"}],"euvd":[{"id":"EUVD-2022-33319","description":"A Denial-of-Service (DoS) vulnerability was discovered in F-Secure \u0026 WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker.","status":"published","published":"2022-08-23T15:54:02Z","modified":"2024-08-03T06:03:53Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:25:39.858075Z"}],"ghsa":[{"id":"GHSA-qj43-c67c-c7c5","title":"A Denial-of-Service (DoS) vulnerability was discovered in F-Secure \u0026 WithSecure products whereby...","description":"A Denial-of-Service (DoS) vulnerability was discovered in F-Secure \u0026 WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker.","status":"published","published":"2022-08-24T00:00:29Z","modified":"2023-01-30T05:04:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:47:07.288055Z"}],"nvd":[{"id":"CVE-2022-28882","description":"A Denial-of-Service (DoS) vulnerability was discovered in F-Secure \u0026 WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker.","status":"published","published":"2022-08-23T16:15:10.237Z","modified":"2026-06-17T04:39:16.563Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:07:25.883929Z"}]}}