HIGH✓ PATCH🇬🇧 English

CVE-2023-20212

CVSS 7.5v3.1pub. 2023-08-18upd. 2024-11-21

A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An attacker could exploit this vulnerability by submitting a crafted AutoIt file to be scanned by ClamAV on the affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to restart unexpectedly, resulting in a DoS condition.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • Cisco Secure Endpoint

    APP
    Cisco
    < 8.1.7.21585
  • Cisco Secure Endpoint Private Cloud

    APP
    Cisco
    < 3.8.0
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2023-20032CRITICAL9.8ten sam produkt

On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerabilit...

CVE-2024-20290HIGH7.5ten sam produkt

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to ca...

CVE-2023-20197HIGH7.5ten sam produkt

A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow ...

CVE-2022-20785HIGH7.5ten sam produkt

On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and...

CVE-2022-20771HIGH7.5ten sam produkt

On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and...

CVE-2023-20212 — HIGH 7.5 | CVEbaza.pl