CVE-2013-2020

Опубликовано: 13 мая 2013

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:suse:linux_enterprise_server:11.0:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11.0:sp2:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*

Версия до 0.97.7 (включая)

cpe:2.3:a:clamav:clamav:0.9:rc1:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90:rc1:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90:rc1.1:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90:rc2:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90:rc3:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90.1_p0:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90.2_p0:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90.3_p0:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.90.3_p1:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.91:rc1:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.91:rc2:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.91.2_p0:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.92_p0:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.93.3:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.94.2:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.95:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.95:rc1:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.95:rc2:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.95:src1:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.95:src2:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.95.1:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.95.2:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.95.3:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.96:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.96:rc1:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.96:rc2:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.96.1:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.96.2:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.96.3:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.96.4:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.96.5:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.97:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.97:rc:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.97.1:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.97.2:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.97.3:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.97.4:*:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.97.5:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.07627

Низкий

5 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2013-2020

ubuntu

больше 12 лет назад

CVE-2013-2020

debian

больше 12 лет назад

Integer underflow in the cli_scanpe function in pe.c in ClamAV before ...

GHSA-3fch-7wxv-99j8

github

больше 3 лет назад

SUSE-SU-2015:0871-1

suse-cvrf

больше 11 лет назад

Recommended update for clamav

SUSE-SU-2015:0298-1

suse-cvrf

больше 11 лет назад

Recommended update for clamav

EPSS

Процентиль: 92%

0.07627

Низкий

5 Medium

CVSS2

Дефекты

CWE-189