Lucene search
+L

3891 matches found

OSV
OSV
added 2024/02/07 5:15 p.m.7 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score
SaveExploits0References3
Prion
Prion
added 2024/02/07 5:15 p.m.32 views

Heap overflow

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

5CVSS7.5AI score0.33558EPSS
SaveExploits0References3Affected Software3
UbuntuCve
UbuntuCve
added 2024/02/07 5:15 p.m.36 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.3AI score0.33558EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/07 5:15 p.m.3 views

UBUNTU-CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.3AI score0.33558EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/02/07 4:16 p.m.13 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7AI score0.33558EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/02/07 4:16 p.m.24 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.7AI score0.33558EPSS
SaveExploits0References3
CVE
CVE
added 2024/02/07 4:16 p.m.348 views

CVE-2024-20290

CVE-2024-20290 : A DoS in ClamAV due to a heap-based overflow in the OLE2 file format parser caused by an incorrect end-of-string check during scanning. Attacker-submitted crafted OLE2 content could crash the ClamAV scanning process. Connected documents confirm this vulnerability and reference mu...

7.5CVSS7.4AI score0.33558EPSS
SaveExploits0References3Affected Software2
Debian CVE
Debian CVE
added 2024/02/07 4:16 p.m.56 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score0.33558EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2024/02/07 4:16 p.m.51 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score0.33558EPSS
SaveExploits0
Cisco
Cisco
added 2024/02/07 4:0 p.m.97 views

ClamAV OLE2 File Format Parsing Denial of Service Vulnerability

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score0.33558EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/02/07 12:0 a.m.2 views

PT-2024-1550 · Clamav +1 · Clamav +1

Name of the Vulnerable Software and Affected Versions: ClamAV affected versions not specified Description: A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability ...

7.8CVSS6.2AI score0.84841EPSS
SaveExploits0References27
Positive Technologies
Positive Technologies
added 2024/02/07 12:0 a.m.6 views

PT-2024-1939

Name of the Vulnerable Software and Affected Versions ClamAV affected versions not specified Description A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account. The vulnerability is due t...

10CVSS7.2AI score0.84841EPSS
SaveExploits16References110
FreeBSD
FreeBSD
added 2024/02/07 12:0 a.m.47 views

clamav -- Multiple vulnerabilities

The ClamAV project reports: CVE-2024-20290 A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during...

7.5CVSS8.1AI score0.84841EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/01/09 12:0 a.m.7 views

Ubuntu: Security Advisory (USN-6568-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References3
OSV
OSV
added 2024/01/08 5:58 p.m.3 views

USN-6568-1 clamav update

The ClamAV package was updated to a new upstream version to remain compatible with signature database downloads...

5.8AI score
SaveExploits0References2
Ubuntu
Ubuntu
added 2024/01/08 5:58 p.m.23 views

USN-6568-1: ClamAV update

The ClamAV package was updated to a new upstream version to remain compatible with signature database downloads...

5.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.2 views

PT-2024-41017 · Clamav · Clamav

Name of the Vulnerable Software and Affected Versions: ClamAV affected versions not specified Description: The issue concerns the ClamAV package, which was updated to a new upstream version. This update was necessary to maintain compatibility with signature database downloads. There is no...

7AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/01/08 12:0 a.m.10 views

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : ClamAV update (USN-6568-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6568-1 advisory. The ClamAV package was updated to a new upstream version to remain compatible with signature database downloads. Tenable has extracted...

5.6AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/11/13 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2023:4415-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.2AI score0.12283EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2023/11/11 12:0 a.m.42 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : clamav (SUSE-SU-2023:4415-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4415-1 advisory. - Updated to version 0.103.11: - CVE-2023-40477: Updated libclamunrar dependency to version 6.2.12...

7.8CVSS7.5AI score0.12283EPSS
SaveExploits1References4
Rows per page
Query Builder