Описание
A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an issue in the C to Rust foreign function interface. An attacker could exploit this vulnerability by submitting a crafted file containing HTML content to be scanned by ClamAV on an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.3.0 only |
| esm-infra-legacy/trusty | not-affected | 1.3.0 only |
| esm-infra/bionic | not-affected | 1.3.0 only |
| esm-infra/focal | not-affected | 1.3.0 only |
| esm-infra/xenial | not-affected | 1.3.0 only |
| focal | not-affected | 1.3.0 only |
| jammy | not-affected | 1.3.0 only |
| mantic | not-affected | 1.3.0 only |
| noble | not-affected | 1.3.0 only |
| trusty/esm | not-affected | 1.3.0 only |
Показывать по
EPSS
7.5 High
CVSS3
Связанные уязвимости
A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an issue in the C to Rust foreign function interface. An attacker could exploit this vulnerability by submitting a crafted file containing HTML content to be scanned by ClamAV on an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
A vulnerability in the HTML parser of ClamAV could allow an unauthenti ...
A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an issue in the C to Rust foreign function interface. An attacker could exploit this vulnerability by submitting a crafted file containing HTML content to be scanned by ClamAV on an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Уязвимость анализатора HTML-кода пакета антивирусных программ ClamAV, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.5 High
CVSS3