PT-2013-6049 · Cisco+3 · Clamav+3

Kurt Seifried · Published 2013-12-31 · Updated 2024-06-15 · CVE-2013-6497

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 0.98.5

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, when the -a option is used. This has been demonstrated using the jwplayer.js file.

Recommendations For versions prior to 0.98.5, update to version 0.98.5 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the -a option until a patch is applied.

Fix

DoS

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2014-2402

CVE-2013-6497

DLA-95-1

OPENSUSE-SU-2014_1560-1

OPENSUSE-SU-2024:10571-1

SUSE-SU-2014_1574-1

SUSE-SU-2015:0298-1

SUSE-SU-2015:0871-1

SUSE-SU-2015_0188-1

USN-2423-1

USN-2488-2

Affected Products

Alt Linux

Clamav

Suse

Ubuntu

References · 65

• https://security-tracker.debian.org/tracker/CVE-2013-6497 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2423-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-6497 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-6497 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00007.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-2402 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-6497 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html · Vendor Advisory
• http://ubuntu.com/usn/USN-2423-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-6497 · Vendor Advisory
• http://ubuntu.com/usn/USN-2488-2 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10571-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00003.html · Vendor Advisory
• https://bugzilla.clamav.net/show_bug.cgi?id=11088 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2488-2 · Vendor Advisory