Denial Of Service (DoS)

🗓️ 19 Aug 2023 02:43:38Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 19 Views

libclamav.so vulnerability causing Do

Reporter	Title	Published	Views	Family All 88
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GNU Binutils, Bootstrap, PortSmash, Node.js, and libarchive might affect IBM Storage Defender – Data Protect.	18 Oct 202401:50	–	ibm
FreeBSD	clamav -- Possible denial of service vulnerability in the HFS+ file parser	15 Aug 202300:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : clamav, clamav-data, clamav-devel (ALAS2023-2023-331)	8 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : clamav (ALAS-2023-2233)	8 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : clamav (ALAS-2023-1820)	11 Sep 202300:00	–	nessus
Tenable Nessus	ClamAV < 0.103.9 / 1.0.x < 1.0.2 / 1.1.x < 1.1.1 DoS	4 Sep 202300:00	–	nessus
Tenable Nessus	Debian dla-3544 : clamav - security update	28 Aug 202300:00	–	nessus
Tenable Nessus	Fedora 37 : clamav (2023-9f948bec13)	27 Aug 202300:00	–	nessus
Tenable Nessus	Fedora 38 : clamav (2023-bf72d8833e)	22 Aug 202300:00	–	nessus
Tenable Nessus	FreeBSD : clamav -- Possible denial of service vulnerability in the HFS+ file parser (51a59f36-3c58-11ee-b32e-080027f5fec9)	17 Aug 202300:00	–	nessus

Vulners

Node

clamav clamavMatch0.103.0+dfsg-3debian

AND

debian debian_linuxMatch999

OR

clamav clamavMatch0.102.4+dfsg-0+deb10u1debian

AND

clamav clamavMatch0.103.3+dfsg-0+deb10u1debian

AND

clamav clamavMatch0.102.3+dfsg-0+deb10u1debian

AND

clamav clamavMatch0.103.2+dfsg-0+deb10u1debian

AND

debian debian_linuxMatch10

OR

clamav clamavMatch0.104.4-r0cpp

AND

clamav clamavMatch0.105.1-r0cpp

AND

clamav clamavMatch1.0.1-r2cpp

AND

clamav clamavMatch0.102.3-r0cpp

AND

clamav clamavMatch1.0.1-r1cpp

AND

clamav clamavMatch1.0.0-r1cpp

AND

clamav clamavMatch1.1.0-r0cpp

AND

clamav clamavMatch0.103.3-r1cpp

AND

clamav clamavMatch0.104.2-r0cpp

AND

clamav clamavMatch0.102.2-r0cpp

AND

clamav clamavMatch0.104.1-r0cpp

AND

clamav clamavMatch0.103.2-r0cpp

AND

clamav clamavMatch1.0.1-r0cpp

AND

clamav clamavMatch0.104.2-r1cpp

AND

clamav clamavMatch0.103.1-r0cpp

AND

clamav clamavMatch0.104.3-r0cpp

AND

clamav clamavMatch0.103.3-r0cpp

AND

clamav clamavMatch0.104.4-r1cpp

AND

clamav clamavMatch1.0.0-r0cpp

AND

alpinelinux alpine_linuxMatchedge

OR

clamav clamavMatch0.103.2+dfsg-2debian

AND

clamav clamavMatch0.103.0+dfsg-3.1debian

AND

clamav clamavMatch0.103.0+dfsg-3debian

AND

debian debian_linuxMatch11

OR

libclamav.so libclamav.soRange1.0.8–12.0.0cpp

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi
github	www.github.com/advisories/GHSA-r7mw-p665-4533
lists	www.lists.debian.org/debian-lts-announce/2023/08/msg00033.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IISWNZUBAQL4MNBRKLDYG3SHTEGP5KEO/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/J2XCIZFCCDDZ34XRMTQNAHAHMVQB66U5/
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-rNwNEEee

25 Jan 2024 20:22Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.5

EPSS0.005

denial of service libclamav.so file decompression