Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-20216

Опубликовано: 01 июл. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device.

This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:*
Версия до 1.27.2 (исключая)
cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:*
Версия до 1.29.0 (исключая)
cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*
Версия до 8.6.2 (исключая)
Конфигурация 2

Одно из

cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*
Версия до 1.4.5 (исключая)
cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*
Версия от 1.5.0 (включая) до 1.5.3 (исключая)

EPSS

Процентиль: 40%
0.005
Низкий

7.5 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 месяца назад

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.

CVSS3: 7.5
redhat
около 1 месяца назад

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.

CVSS3: 7.5
msrc
24 дня назад

ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability

CVSS3: 7.5
debian
около 1 месяца назад

A vulnerability in the InstallShield file format parser of ClamAV coul ...

CVSS3: 7.5
github
около 1 месяца назад

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An attacker could exploit this vulnerability by submitting a crafted InstallShield file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process and temporarily consume available system resources, resulting in a DoS condition on the affected software.

EPSS

Процентиль: 40%
0.005
Низкий

7.5 High

CVSS3

Дефекты

CWE-770