The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade clamav | Jul 30, 2024 | Nov 17, 2011 |
| Gentoo Linux | — | Upgrade app-antivirus/clamav. | Oct 30, 2017 | Nov 17, 2011 |
| Suse | — | Upgrade libfreshclam4Upgrade libclamav12Upgrade clamav-milterUpgrade clamav-docs-htmlUpgrade libclammspack0Upgrade clamav-develUpgrade libfreshclam3Upgrade libclamav7Upgrade clamav | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libclamav6 | Nov 8, 2024 | Nov 17, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub