CVE-2007-0897
CVE-2007-0897
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.
CVSS 7.5 · Hoch · EPSS 3,5% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
n/a
- Softwareversionen
- n/a: Betroffen
Keine Korrektur veröffentlicht
clamav Debian:12
- Betroffene Versionsbereiche
- ECOSYSTEM: < 0.90-1
Auf 0.90-1 aktualisieren
clamav Debian:13
- Betroffene Versionsbereiche
- ECOSYSTEM: < 0.90-1
Auf 0.90-1 aktualisieren
clamav Debian:14
- Betroffene Versionsbereiche
- ECOSYSTEM: < 0.90-1
Auf 0.90-1 aktualisieren
Originalquellen
- http://www.securityfocus.com/bid/22580
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32531
- http://secunia.com/advisories/24187
- http://secunia.com/advisories/24192
- http://www.vupen.com/english/advisories/2008/0924/references
- http://osvdb.org/32283
- http://www.debian.org/security/2007/dsa-1263
- http://secunia.com/advisories/29420
- http://secunia.com/advisories/24332
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
- http://secunia.com/advisories/24425
- http://lists.suse.com/archive/suse-security-announce/2007-Feb/0004.html
- http://security.gentoo.org/glsa/glsa-200703-03.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:043
- http://secunia.com/advisories/24319
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=475
- http://docs.info.apple.com/article.html?artnum=307562
- http://secunia.com/advisories/24183
- http://www.securitytracker.com/id?1017659
- http://www.vupen.com/english/advisories/2007/0623
- https://nvd.nist.gov/vuln/detail/CVE-2007-0897