PT-2011-4549 · Cisco · Clamav

Hanno Böck · Publicado 2011-11-17 · Atualizado 2024-06-15 · CVE-2011-3627

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 0.97.3

Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is related to the recursion level in the bytecode engine, specifically in the files libclamav/bytecode.c and libclamav/bytecode api.c.

Recommendations For versions prior to 0.97.3, update to version 0.97.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the bytecode engine to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2011-3627

OPENSUSE-SU-2024:10571-1

Produtos afetados

Clamav

Referências · 31

• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-2221 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068940.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-2222 · Nota
• http://securityfocus.com/bid/50183 · Nota
• https://suse.com/security/cve/CVE-2012-1459 · Nota
• https://suse.com/security/cve/CVE-2015-2668 · Nota
• https://suse.com/security/cve/CVE-2015-2305 · Nota
• https://suse.com/security/cve/CVE-2010-0405 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068941.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-2721 · Nota
• https://suse.com/security/cve/CVE-2011-3627 · Nota
• http://secunia.com/advisories/46826 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-3627 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-1463 · Nota