CVE-2023-39341

LowCVSS 3.3/10Last modified Nov 10, 2026

Description

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure χ versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0).

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-755

Affected software

VendorProductVersions
FFRI Security, Inc. FFRI yaraiversions 3.4.0 to 3.4.6 and 3.5.0
FFRI Security, Inc. FFRI yarai Home and Business Editionversion 1.4.0
Soliton Systems K.K.InfoTrace Mark II Malware Protection (Mark II Zerona)versions 3.0.1 to 3.2.2
Soliton Systems K.K.Zerona / Zerona PLUSversions 3.2.32 to 3.2.36
NEC CorporationActSecure χversions 3.4.0 to 3.4.6 and 3.5.0
SOURCENEXT CORPORATION Dual Safe Powered by FFRI yaraiversion 1.4.1
Sky Co., Ltd.EDR Plus PackBundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0
Sky Co., Ltd.EDR Plus Pack CloudBundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0

References

Timeline

Published
Aug 9, 2023
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-393423.6Dangerzone is software for converting potentially dangerous PDFs, office documents, or images to safe PDFs. The Dangerzone CLI (`dangerzone-CVE-2023-393434.3Sulu is an open-source PHP content management system based on the Symfony framework. It allows over the Admin Login form to detect which useCVE-2023-393448.8social-media-skeleton is an uncompleted social media project. A SQL injection vulnerability in the project allows UNION based injections, whCVE-2023-393457.5strapi is an open-source headless CMS. Versions prior to 4.13.1 did not properly restrict write access to fielded marked as private in the uCVE-2023-393469.8LinuxASMCallGraph is software for drawing the call graph of the programming code. Linux ASMCallGraph before commit 20dba06bd1a3cf260612d4f21CVE-2023-393479.0Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to update pod labelsCVE-2023-393485.3Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL alwaCVE-2023-393498.1Sentry is an error tracking and performance monitoring platform. Starting in version 22.1.0 and prior to version 23.7.2, an attacker with acCVE-2023-39359.8A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attackeCVE-2023-393507.5FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue affects Clients only. ICVE-2023-393517.5FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are sCVE-2023-393529.8FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions are subject to a
CVE-2023-39341: Low severity, CVSS 3.3 | Vulnix