Lucene search
+L

182 matches found

OSV
OSV
added 2018/03/13 3:29 p.m.4 views

ALPINE-CVE-2018-1000085

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

5.5CVSS8.4AI score0.01613EPSS
SaveExploits0References1
OSV
OSV
added 2018/03/13 3:29 p.m.22 views

CVE-2018-1000085

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

5.5CVSS6.6AI score
SaveExploits0References6
OSV
OSV
added 2018/03/13 3:29 p.m.11 views

DEBIAN-CVE-2018-1000085

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

5.5CVSS6.8AI score0.01613EPSS
SaveExploits0References1
NVD
NVD
added 2018/03/13 3:29 p.m.25 views

CVE-2018-1000085

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

5.5CVSS6.1AI score0.01613EPSS
SaveExploits0References6
Prion
Prion
added 2018/03/13 3:29 p.m.24 views

Design/Logic Flaw

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

4.3CVSS5.5AI score0.01613EPSS
SaveExploits0References6Affected Software3
CVE
CVE
added 2018/03/13 3:00 p.m.116 views

CVE-2018-1000085

ClamAV (v0.99.3) contains an out-of-bounds heap memory read in the XAR parser’s xar_hash_check function, which can cause a memory leak and denial of service when scanning a crafted XAR file. Public advisories indicate the issue was fixed in upstream with the release of 0.99.4 (and related distro ...

5.5CVSS6.2AI score0.01613EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2018/03/13 3:00 p.m.34 views

CVE-2018-1000085

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

6AI score0.01613EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2018/03/13 3:00 p.m.36 views

CVE-2018-1000085

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

5.5CVSS6.2AI score0.01613EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2018/03/13 3:00 p.m.55 views

CVE-2018-1000085

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

5.5CVSS6.2AI score0.01613EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/03/09 12:00 a.m.47 views

Ubuntu 14.04 LTS / 16.04 LTS : ClamAV vulnerabilities (USN-3592-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3592-1 advisory. It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash,...

5.5CVSS6.9AI score0.0263EPSS
SaveExploits0References3
Ubuntu
Ubuntu
added 2018/03/08 3:26 p.m.59 views

USN-3592-2: ClamAV vulnerabilities

USN-3592-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resultin...

5.5CVSS6.8AI score0.0263EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2018/03/08 12:16 p.m.65 views

USN-3592-1: ClamAV vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-0202 Hanno Böck discovered that ClamAV incorrectly handled parsing certain X...

5.5CVSS6.8AI score0.0263EPSS
SaveExploits0
OSV
OSV
added 2018/03/08 12:16 p.m.8 views

USN-3592-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-0202 Hanno Böck discovered that ClamAV incorrectly handled parsing certain X...

5.5CVSS6.9AI score0.0263EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2018/02/27 12:00 a.m.28 views

CVE-2018-1000085

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

5.5CVSS6.7AI score0.01613EPSS
SaveExploits0References4
OSV
OSV
added 2018/02/27 12:00 a.m.9 views

UBUNTU-CVE-2018-1000085

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xarhashcheck that can result in Leaking of memory, may help in developing exploit chains.. This attack appear to be exploitable via The victim must scan a crafted XAR file. This...

5.5CVSS6.7AI score0.01613EPSS
SaveExploits0References5
OSV
OSV
added 2017/10/09 9:51 a.m.8 views

MGASA-2017-0363 Updated clamav packages fix security vulnerability

A malformed xar file can cause an out of bounds heap read in clamav...

7.1AI score
SaveExploits0References3
Mageia
Mageia
added 2017/10/09 9:51 a.m.18 views

Updated clamav packages fix security vulnerability

A malformed xar file can cause an out of bounds heap read in clamav...

1AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2017/09/08 2:00 p.m.32 views

CVE-2017-14166

libarchive 3.3.2 allows remote attackers to cause a denial of service xmldata heap-based buffer over-read and application crash via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archivereadsupportformatxar.c...

6.5CVSS5.3AI score0.0277EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/09/07 12:00 a.m.8 views

libarchive xml_data Denial of Service Vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in xmldata in libarchive version 3.3.2. A remote attacker can exploit this vulnerability to cause a denial of service heap-based buffer out-of-bounds read and application crash with a specially crafted x...

6.5CVSS6.5AI score0.0277EPSS
SaveExploits0References1
OSV
OSV
added 2017/09/06 6:29 p.m.6 views

ALPINE-CVE-2017-14166

libarchive 3.3.2 allows remote attackers to cause a denial of service xmldata heap-based buffer over-read and application crash via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archivereadsupportformatxar.c...

6.5CVSS6.9AI score0.0277EPSS
SaveExploits0References1
Rows per page
Query Builder