CVE-2021-33600

Name of the Vulnerable Software and Affected Versions F-Secure Internet Gatekeeper (affected versions not specified)

Description A denial-of-service (DoS) issue was discovered in the web user interface of F-Secure Internet Gatekeeper. The issue occurs because an attacker can trigger an assertion via a malformed HTTP packet to the web interface. An unauthenticated attacker could exploit this by sending a large username parameter. A successful exploitation could lead to a denial-of-service of the product. The vulnerability is related to the use of the assert() function or a similar operator when processing the username parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.