Lucene search

[email protected]NVD:CVE-2009-1371

HistoryApr 23, 2009 - 3:30 p.m.

CVE-2009-1371

2009-04-2315:30:00

CWE-20

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.184 Low

EPSS

Percentile

96.2%

JSON

The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding.

Affected configurations

NVD

Node

clamavclamavRange≤0.95

clamavclamavMatch0.01

clamavclamavMatch0.02

clamavclamavMatch0.3

clamavclamavMatch0.03

clamavclamavMatch0.05

clamavclamavMatch0.8_rc3

clamavclamavMatch0.9_rc1

clamavclamavMatch0.10

clamavclamavMatch0.12

clamavclamavMatch0.13

clamavclamavMatch0.14pre

clamavclamavMatch0.15

clamavclamavMatch0.20

clamavclamavMatch0.21

clamavclamavMatch0.22

clamavclamavMatch0.23

clamavclamavMatch0.24

clamavclamavMatch0.51

clamavclamavMatch0.52

clamavclamavMatch0.53

clamavclamavMatch0.54

clamavclamavMatch0.60

clamavclamavMatch0.60p

clamavclamavMatch0.65

clamavclamavMatch0.66

clamavclamavMatch0.67

clamavclamavMatch0.67-1

clamavclamavMatch0.68

clamavclamavMatch0.68.1

clamavclamavMatch0.70

clamavclamavMatch0.70rc

clamavclamavMatch0.71

clamavclamavMatch0.72

clamavclamavMatch0.73

clamavclamavMatch0.74

clamavclamavMatch0.75

clamavclamavMatch0.75.1

clamavclamavMatch0.80

clamavclamavMatch0.80rc4

clamavclamavMatch0.80_rc

clamavclamavMatch0.80_rc1

clamavclamavMatch0.80_rc2

clamavclamavMatch0.80_rc3

clamavclamavMatch0.81

clamavclamavMatch0.81_rc1

clamavclamavMatch0.82

clamavclamavMatch0.83

clamavclamavMatch0.84

clamavclamavMatch0.84_rc1

clamavclamavMatch0.84_rc2

clamavclamavMatch0.85

clamavclamavMatch0.85.1

clamavclamavMatch0.86

clamavclamavMatch0.86.1

clamavclamavMatch0.86.2

clamavclamavMatch0.86_rc1

clamavclamavMatch0.87

clamavclamavMatch0.87.1

clamavclamavMatch0.88

clamavclamavMatch0.88.1

clamavclamavMatch0.88.2

clamavclamavMatch0.88.3

clamavclamavMatch0.88.4

clamavclamavMatch0.88.5

clamavclamavMatch0.88.6

clamavclamavMatch0.88.7

clamavclamavMatch0.88.7_p0

clamavclamavMatch0.88.7_p1

clamavclamavMatch0.90

clamavclamavMatch0.90.1

clamavclamavMatch0.90.1_p0

clamavclamavMatch0.90.2

clamavclamavMatch0.90.2_p0

clamavclamavMatch0.90.3

clamavclamavMatch0.90.3_p0

clamavclamavMatch0.90.3_p1

clamavclamavMatch0.90_rc1

clamavclamavMatch0.90_rc1.1

clamavclamavMatch0.90_rc2

clamavclamavMatch0.90_rc3

clamavclamavMatch0.91

clamavclamavMatch0.91.1

clamavclamavMatch0.91.2

clamavclamavMatch0.91.2_p0

clamavclamavMatch0.91_rc1

clamavclamavMatch0.91_rc2

clamavclamavMatch0.92

clamavclamavMatch0.92.1

clamavclamavMatch0.92_p0

clamavclamavMatch0.93

clamavclamavMatch0.93.1

clamavclamavMatch0.93.2

clamavclamavMatch0.93.3

clamavclamavMatch0.94

clamavclamavMatch0.94.1

clamavclamavMatch0.94.2

clamavclamavMatch0.95src1

clamavclamavMatch0.95src2

References

lists.apple.com/archives/security-announce/2009/Sep/msg00004.html

osvdb.org/53602

secunia.com/advisories/34612

secunia.com/advisories/34654

secunia.com/advisories/34716

secunia.com/advisories/36701

support.apple.com/kb/HT3865

svn.clamav.net/websvn/filedetails.php?repname=clamav-devel&path=%2Ftrunk%2FChangeLog&rev=5032

www.debian.org/security/2009/dsa-1771

www.mandriva.com/security/advisories?name=MDVSA-2009:097

www.securityfocus.com/bid/34446

www.securitytracker.com/id?1022028

www.ubuntu.com/usn/usn-756-1

www.vupen.com/english/advisories/2009/0985

launchpad.net/bugs/360502

wwws.clamav.net/bugzilla/show_bug.cgi?id=1552

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.184 Low

EPSS

Percentile

96.2%

JSON

Related for NVD:CVE-2009-1371

ubuntucve1 cvelist1 cve1 nessus10 openvas16 debiancve1 prion1 redhatcve2 seebug1 debian2 osv1 gentoo1 altlinux3