CVSS 7.5 · High EPSS 7,1%
Kerentanan Missing Release of Memory after Effective Lifetime pada clamav, cisco secure endpoint +2 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. For a description of this vulnerability, see the ClamAV blog. This advisory will be updated as additional information becomes available.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| clamav | clamav | Semua versi sebelum 0.103.5 |
| clamav | clamav | Semua versi hingga 0.103.5 |
| clamav | clamav | Versi 0.104.0 hingga sebelum 0.104.2 |
| cisco | secure endpoint | Semua versi sebelum 1.16.3 |
| cisco | secure endpoint | Semua versi sebelum 1.17.2 |
| cisco | secure endpoint | Semua versi sebelum 7.5.5 |
| cisco | secure endpoint | Versi 1.18.0 hingga sebelum 1.18.2 |
| fedoraproject | fedora | Versi 34 |
| fedoraproject | fedora | Versi 35 |
| fedoraproject | fedora | Versi 36 |
| debian | debian linux | Versi 9.0 |