![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2023-20197 |
Description: | A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog . |
Test IDs: | 1.3.6.1.4.1.25623.1.0.884702 1.3.6.1.4.1.25623.1.1.12.2023.6303.2 1.3.6.1.4.1.25623.1.1.12.2023.6303.1 1.3.6.1.4.1.25623.1.1.4.2023.3456.1 1.3.6.1.4.1.25623.1.0.833032 1.3.6.1.4.1.25623.1.1.4.2023.3435.1 1.3.6.1.4.1.25623.1.0.884692 1.3.6.1.4.1.25623.1.1.1.2.2023.3544 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2023-20197 cisco-sa-clamav-rNwNEEee https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-rNwNEEee |