CVE-2017-6419

Опубликовано: 07 авг. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file.

Ссылки

http://www.debian.org/security/2017/dsa-3946
https://bugzilla.clamav.net/show_bug.cgi?id=11701
Issue Tracking
https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/heap-overflow/clamav_chm_crash.md
Third Party Advisory
https://github.com/vrtadmin/clamav-devel/commit/a83773682e856ad6529ba6db8d1792e6d515d7f1
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/02/msg00014.html
https://security.gentoo.org/glsa/201804-16
http://www.debian.org/security/2017/dsa-3946
https://bugzilla.clamav.net/show_bug.cgi?id=11701
Issue Tracking
https://github.com/varsleak/varsleak-vul/blob/master/clamav-vul/heap-overflow/clamav_chm_crash.md
Third Party Advisory
https://github.com/vrtadmin/clamav-devel/commit/a83773682e856ad6529ba6db8d1792e6d515d7f1
Issue Tracking
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/02/msg00014.html
https://security.gentoo.org/glsa/201804-16

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:libmspack_project:libmspack:0.5:alpha:*:*:*:*:*:*

cpe:2.3:a:clamav:clamav:0.99.2:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02123

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-6419

CVSS3: 7.8

ubuntu

больше 8 лет назад

CVE-2017-6419

CVSS3: 6.5

redhat

почти 9 лет назад

CVE-2017-6419

CVSS3: 7.8

debian

больше 8 лет назад

mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows ...

GHSA-x569-chqv-xjj7

CVSS3: 7.8

github

больше 3 лет назад

openSUSE-SU-2018:0825-1

suse-cvrf

почти 8 лет назад

Security update for clamav

EPSS

Процентиль: 84%

0.02123

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119