PT-2014-8810 · Cisco +2 · Clamav +2

🗓️ 24 Nov 2014 00:00:00Reported by Positive TechnologiesType

ClamAV heap overflow in command line scanpe from crafted y0da Crypter PE file causes denial of service; update to 0.98.5.

Reporter	Title	Published	Views	Family All 264
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabiliies in libmspack affect PowerKVM	4 Mar 201905:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801r	26 Oct 201821:10	–	ibm
FreeBSD	clamav -- Possbile denial-of-service vulnerability	22 Jan 202500:00	–	freebsd
FreeBSD	clamav -- multiple vulnerabilities	3 Oct 201800:00	–	freebsd
Tenable Nessus	ClamAV < 0.98.5 Multiple Vulnerabilities	24 Jul 201500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libmspack (ALAS-2019-1152)	25 Jan 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : clamav (ALAS-2014-457)	10 Dec 201400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : clamav (ALAS-2019-1146)	14 Jan 201900:00	–	nessus
Tenable Nessus	CentOS 7 : libmspack (CESA-2018:3327)	16 Nov 201800:00	–	nessus

Source	Link
github	www.github.com/vrtadmin/clamav-devel/commit/fc3794a54d2affe5770c1f876484a871c783e91e
ubuntu	www.ubuntu.com/security/CVE-2013-6497
osv	www.osv.dev/vulnerability/USN-2423-1
lists	www.lists.fedoraproject.org/pipermail/package-announce/2014-November/144979.html
lists	www.lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2014-9050
osv	www.osv.dev/vulnerability/MGASA-2014-0487
ubuntu	www.ubuntu.com/security/CVE-2014-9050
advisories	www.advisories.mageia.org/MGASA-2014-0487.html
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2014-9050

23 Jan 2025 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25

CVSS 36.5

CVSS 3.15.3 - 7.5

EPSS0.06887

SSVC