CVE-2021-44747

Denial-of-Service (DoS) Vulnerability

MEDIUM
6.5
CVSS Score
Published: March 1, 2022 at 11:55 AM UTC
Updated: June 17, 2026 at 04:12 AM UTC
7 products affected across 1 vendorInternet GatekeeperAtlantElements Endpoint Protection

Using F-Secure endpoint protection products on Mac, F-Secure Linux Security (32-bit), F-Secure Linux Security 64, F-Secure Atlant, F-Secure Internet Gatekeeper & F-Secure Security Cloud by F-Secure?

Get instant alerts when new vulnerabilities affect F-Secure endpoint protection products on Mac, F-Secure Linux Security (32-bit), F-Secure Linux Security 64, F-Secure Atlant, F-Secure Internet Gatekeeper & F-Secure Security Cloud - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.5
Exploit prediction
EPSS 0.6%

Description

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 2022-02-23_01All Version
Affected range stops below 2022-02-23_01, so it looks safe — our inference, not a vendor statement
v < 2022-02-23_01
Affected range stops below 2022-02-23_01, so it looks safe — our inference, not a vendor statement
v < 2022-02-23_01All Version
Affected range stops below 2022-02-23_01, so it looks safe — our inference, not a vendor statement
v < 2022-02-23_01All Version
Affected range stops below 2022-02-23_01, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

CVSS

Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card