Lucene search
+L

180 matches found

Prion
Prion
added 2024/02/07 5:15 p.m.32 views

Heap overflow

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

5CVSS7.5AI score0.33558EPSS
SaveExploits0References3Affected Software3
UbuntuCve
UbuntuCve
added 2024/02/07 5:15 p.m.36 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.3AI score0.33558EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/07 5:15 p.m.3 views

UBUNTU-CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.3AI score0.33558EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/02/07 4:16 p.m.13 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7AI score0.33558EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/02/07 4:16 p.m.24 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.7AI score0.33558EPSS
SaveExploits0References3
CVE
CVE
added 2024/02/07 4:16 p.m.348 views

CVE-2024-20290

CVE-2024-20290 : A DoS in ClamAV due to a heap-based overflow in the OLE2 file format parser caused by an incorrect end-of-string check during scanning. Attacker-submitted crafted OLE2 content could crash the ClamAV scanning process. Connected documents confirm this vulnerability and reference mu...

7.5CVSS7.4AI score0.33558EPSS
SaveExploits0References3Affected Software2
Debian CVE
Debian CVE
added 2024/02/07 4:16 p.m.56 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score0.33558EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2024/02/07 4:16 p.m.51 views

CVE-2024-20290

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score0.33558EPSS
SaveExploits0
Cisco
Cisco
added 2024/02/07 4:0 p.m.95 views

ClamAV OLE2 File Format Parsing Denial of Service Vulnerability

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer...

7.5CVSS7.5AI score0.33558EPSS
SaveExploits0References1
FreeBSD
FreeBSD
added 2024/02/07 12:0 a.m.47 views

clamav -- Multiple vulnerabilities

The ClamAV project reports: CVE-2024-20290 A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during...

7.5CVSS8.1AI score0.84841EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/14 12:0 a.m.5 views

PT-2023-35907 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash occurs in the initialize encryption key function, which is called by cli ole2 extra...

6.8AI score
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/21 2:0 a.m.3 views

SUSE CVE-2022-20803

A vulnerability in the OLE2 file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a...

8.6CVSS6.8AI score0.01056EPSS
SaveExploits0References3
NVD
NVD
added 2023/02/17 6:15 p.m.21 views

CVE-2022-20803

A vulnerability in the OLE2 file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a...

8.6CVSS8.3AI score0.01056EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/17 6:15 p.m.27 views

CVE-2022-20803

A vulnerability in the OLE2 file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a...

7.5CVSS9.1AI score
SaveExploits0References2
Prion
Prion
added 2023/02/17 6:15 p.m.29 views

Double free

A vulnerability in the OLE2 file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a...

5CVSS7.2AI score0.01056EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/17 12:0 a.m.27 views

CVE-2022-20803 ClamAV Double-free Vulnerability in the OLE2 File Parser

A vulnerability in the OLE2 file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a...

8.6CVSS7.2AI score0.01056EPSS
SaveExploits0References2
CVE
CVE
added 2023/02/17 12:0 a.m.158 views

CVE-2022-20803

CVE-2022-20803 : In ClamAV, the OLE2 file parser in versions 0.104.0–0.104.2 has a flaw due to incorrect use of realloc that may cause a double-free. This can enable an unauthenticated, remote attacker to trigger a denial of service by submitting a crafted OLE2 file for scanning, crashing the Cla...

8.6CVSS7.6AI score0.01056EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/02/17 12:0 a.m.39 views

CVE-2022-20803 ClamAV Double-free Vulnerability in the OLE2 File Parser

A vulnerability in the OLE2 file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a...

8.6CVSS8.5AI score0.01056EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2023/02/17 12:0 a.m.68 views

CVE-2022-20803

A vulnerability in the OLE2 file parser of Clam AntiVirus ClamAV versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the realloc function that may result in a...

8.6CVSS7.5AI score0.01056EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 6:12 a.m.4 views

SUSE CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

4.3CVSS6.8AI score0.03249EPSS
SaveExploits0References4
Rows per page
Query Builder