Описание
A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to an error related to the MEW unpacker within the "unmew11()" function (libclamav/mew.c), which can be exploited to trigger an invalid read memory access via a specially crafted EXE file.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 0.100.2+dfsg-1ubuntu0.18.04.1 |
| devel | released | 0.100.2+dfsg-0ubuntu1 |
| esm-infra-legacy/trusty | released | 0.100.2+dfsg-1ubuntu0.14.04.1 |
| esm-infra-legacy/xenial | released | 0.100.2+dfsg-1ubuntu0.16.04.1 |
| esm-infra/bionic | released | 0.100.2+dfsg-1ubuntu0.18.04.1 |
| esm-infra/xenial | released | 0.100.2+dfsg-1ubuntu0.16.04.1 |
| precise/esm | not-affected | 0.100.2+dfsg-1ubuntu0.12.04.1 |
| trusty | released | 0.100.2+dfsg-1ubuntu0.14.04.1 |
| trusty/esm | released | 0.100.2+dfsg-1ubuntu0.14.04.1 |
| upstream | released | 0.100.2 |
Показывать по
EPSS
4.3 Medium
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to an error related to the MEW unpacker within the "unmew11()" function (libclamav/mew.c), which can be exploited to trigger an invalid read memory access via a specially crafted EXE file.
A vulnerability in ClamAV versions prior to 0.100.2 could allow an att ...
A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to an error related to the MEW unpacker within the "unmew11()" function (libclamav/mew.c), which can be exploited to trigger an invalid read memory access via a specially crafted EXE file.
EPSS
4.3 Medium
CVSS2
5.5 Medium
CVSS3