cve/2021/CVE-2021-33600.md

18 lines
1.1 KiB
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2021-33600](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33600)
![](https://img.shields.io/static/v1?label=Product&message=F-Secure%20Internet%20Gatekeeper&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=5%20Series%3D%20All%20Version%20%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Denial%20of%20Service%20Vulnerability%20in%20Web%20Interface%20of%20F-Secure%20Internet%20Gatekeeper&color=brighgreen)
### Description
A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated attacker could exploit this vulnerability by sending a large username parameter. A successful exploitation could lead to a denial-of-service of the product.
### POC
#### Reference
- https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33600
#### Github
No PoCs found on GitHub currently.