PT-2011-4549 · Cisco · Clamav

Hanno Böck · Published 2011-11-17 · Updated 2024-06-15 · CVE-2011-3627

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 0.97.3

Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is related to the recursion level in the bytecode engine, specifically in the files libclamav/bytecode.c and libclamav/bytecode api.c.

Recommendations For versions prior to 0.97.3, update to version 0.97.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the bytecode engine to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2011-3627

OPENSUSE-SU-2024:10571-1

Affected Products

Clamav

References · 31

• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068940.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068941.html · Vendor Advisory
• http://secunia.com/advisories/46826 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-3627 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10571-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-3627 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3627 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-3627 · Vendor Advisory
• http://ubuntu.com/usn/USN-1258-1 · Vendor Advisory
• http://secunia.com/advisories/46717 · Vendor Advisory
• https://suse.com/security/cve/CVE-2015-2221 · Note
• https://suse.com/security/cve/CVE-2015-2222 · Note
• http://securityfocus.com/bid/50183 · Note
• https://suse.com/security/cve/CVE-2012-1459 · Note