CVE-2021-44747: F-Secure Atlant

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine.

Affected products

• F-Secure Atlant: before 2022-02-23_01 (fixed in 2022-02-23_01)
• F-Secure Elements Endpoint Protection: before 2022-02-23_01 (fixed in 2022-02-23_01)
• F-Secure Internet Gatekeeper: up to and including 2022-02-23_01
• F-Secure Linux Security: before 2022-02-23_01 (fixed in 2022-02-23_01)
• F-Secure Security Cloud: before 2022-02-23_01 (fixed in 2022-02-23_01)

Published 2022-03-01. Last modified 2026-06-17.