Количество 5
Количество 5
CVE-2020-37167
ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulate bytecode function names. Attackers can exploit the weak input validation in function name encoding to potentially execute malicious bytecode or cause unexpected behavior in the ClamAV engine.
CVE-2020-37167
ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulate bytecode function names. Attackers can exploit the weak input validation in function name encoding to potentially execute malicious bytecode or cause unexpected behavior in the ClamAV engine.
CVE-2020-37167
ClamAV versions prior to 0.103.0-rc contain a vulnerability in functio ...
GHSA-9wpq-3w4j-985q
ClamAV ClamBC bytecode interpreter contains a vulnerability in function name processing that allows attackers to manipulate bytecode function names. Attackers can exploit the weak input validation in function name encoding to potentially execute malicious bytecode or cause unexpected behavior in the ClamAV engine.
BDU:2026-02545
Уязвимость интерпретатора байт-кода ClamBC пакета антивирусных программ ClamAV, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2020-37167 ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulate bytecode function names. Attackers can exploit the weak input validation in function name encoding to potentially execute malicious bytecode or cause unexpected behavior in the ClamAV engine. | CVSS3: 8.4 | 0% Низкий | 5 месяцев назад | |
CVE-2020-37167 ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulate bytecode function names. Attackers can exploit the weak input validation in function name encoding to potentially execute malicious bytecode or cause unexpected behavior in the ClamAV engine. | CVSS3: 8.4 | 0% Низкий | 5 месяцев назад | |
CVE-2020-37167 ClamAV versions prior to 0.103.0-rc contain a vulnerability in functio ... | CVSS3: 8.4 | 0% Низкий | 5 месяцев назад | |
GHSA-9wpq-3w4j-985q ClamAV ClamBC bytecode interpreter contains a vulnerability in function name processing that allows attackers to manipulate bytecode function names. Attackers can exploit the weak input validation in function name encoding to potentially execute malicious bytecode or cause unexpected behavior in the ClamAV engine. | CVSS3: 9.8 | 0% Низкий | 4 месяца назад | |
BDU:2026-02545 Уязвимость интерпретатора байт-кода ClamBC пакета антивирусных программ ClamAV, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании | CVSS3: 9.8 | 0% Низкий | почти 6 лет назад |
Уязвимостей на страницу