PT-2013-6049 · Cisco+3 · Clamav+3

Kurt Seifried · Publicado 2013-12-31 · Atualizado 2024-06-15 · CVE-2013-6497

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 0.98.5

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, when the -a option is used. This has been demonstrated using the jwplayer.js file.

Recommendations For versions prior to 0.98.5, update to version 0.98.5 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the -a option until a patch is applied.

Correção

DoS

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

ALT-PU-2014-2402

CVE-2013-6497

DLA-95-1

OPENSUSE-SU-2014_1560-1

OPENSUSE-SU-2024:10571-1

SUSE-SU-2014_1574-1

SUSE-SU-2015:0298-1

SUSE-SU-2015:0871-1

SUSE-SU-2015_0188-1

USN-2423-1

USN-2488-2

Produtos afetados

Alt Linux

Clamav

Suse

Ubuntu

Referências · 65

• https://github.com/vrtadmin/clamav-devel/commit/fc3794a54d2affe5770c1f876484a871c783e91e · Nota
• http://secunia.com/advisories/60150 · Nota
• http://openwall.com/lists/oss-security/2014/11/19/2 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-6497 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2423-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2013-6497 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-6497 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00007.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-2222 · Nota
• https://suse.com/security/cve/CVE-2012-1459 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/6PSRBRQIDMBN7X4HQ5F2FMS3CHDEJRJ4 · Nota
• https://errata.altlinux.org/ALT-PU-2014-2402 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2013-6497 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-2668 · Nota
• https://suse.com/security/cve/CVE-2015-2305 · Nota