Lucene search
+L

4060 matches found

Veracode
Veracode
added 2024/02/12 7:55 p.m.27 views

Denial Of Service

clamavedge is vulnerable of Denial Of Service. The vulnerability due to submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device and incorrect check for end-of-string values during scanning. It allow an attacker to cause the ClamAV scanning process to...

7.5CVSS6.5AI score0.33558EPSS
SaveExploits0References5Affected Software1
SUSE CVE
SUSE CVE
added 2024/02/09 3:00 a.m.6 views

SUSE CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS6.9AI score0.33558EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2024/02/09 3:00 a.m.7 views

SUSE CVE-2024-20328

A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file nam...

5.3CVSS7.2AI score0.84841EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2024/02/09 12:00 a.m.71 views

CVE-2024-20328

A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file nam...

5.3CVSS7.1AI score0.84841EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/09 12:00 a.m.9 views

UBUNTU-CVE-2024-20328

A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file nam...

5.3CVSS7.4AI score0.84841EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/02/09 12:00 a.m.43 views

ClamAV 1.0.0 < 1.0.4, 1.1.x, 1.2.0 < 1.2.1 DoS

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score0.33558EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/02/09 12:00 a.m.46 views

ClamAV 0.104.x, 0.105.x, 1.0.0 < 1.0.4, 1.1.x, 1.2.0 < 1.2.1 RCE

The ClamAV reported version is 0.104.x, 0.105.x, 1.0.x 1.0.4, 1.1.x or 1.2.x 1.2.1. It is, therefore, affected by a vulnerability in the “VirusEvent” feature, where an attacker could manipulate the '%f' format string parameter to inject malicious commands. Note that Nessus has not tested for...

5.3CVSS6.3AI score0.84841EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/02/08 12:00 a.m.39 views

FreeBSD : clamav -- Multiple vulnerabilities (68ae70c5-c5e5-11ee-9768-08002784c58d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 68ae70c5-c5e5-11ee-9768-08002784c58d advisory. - A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated,...

7.5CVSS6.8AI score0.84841EPSS
SaveExploits0References4
NVD
NVD
added 2024/02/07 5:15 p.m.18 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score0.33558EPSS
SaveExploits0References3
Chainguard
Chainguard
added 2024/02/07 5:15 p.m.47 views

CVE-2024-20290 vulnerabilities

Vulnerabilities for packages: clamav...

7.5CVSS7.3AI score0.33558EPSS
SaveExploits0
Wolfi
Wolfi
added 2024/02/07 5:15 p.m.29 views

CVE-2024-20290 vulnerabilities

Vulnerabilities for packages: clamav...

7.5CVSS7.5AI score0.33558EPSS
SaveExploits0
OSV
OSV
added 2024/02/07 5:15 p.m.5 views

DEBIAN-CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS6.9AI score0.33558EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/07 5:15 p.m.10 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2024/02/07 5:15 p.m.42 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.3AI score0.33558EPSS
SaveExploits0References4
Prion
Prion
added 2024/02/07 5:15 p.m.36 views

Heap overflow

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

5CVSS7.5AI score0.33558EPSS
SaveExploits0References3Affected Software3
OSV
OSV
added 2024/02/07 5:15 p.m.6 views

UBUNTU-CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.3AI score0.33558EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/02/07 4:16 p.m.13 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7AI score0.33558EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/02/07 4:16 p.m.33 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.7AI score0.33558EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2024/02/07 4:16 p.m.105 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score0.33558EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/02/07 4:16 p.m.62 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score0.33558EPSS
SaveExploits0
Rows per page
Query Builder