CVE-2007-0897
CVE-2007-0897
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.
CVSS 7.5 · Alta · EPSS 3,5% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
clamav Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.90-1
Actualiza a 0.90-1
clamav Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.90-1
Actualiza a 0.90-1
clamav Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.90-1
Actualiza a 0.90-1
Fuentes originales
- http://www.securityfocus.com/bid/22580
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32531
- http://secunia.com/advisories/24187
- http://secunia.com/advisories/24192
- http://www.vupen.com/english/advisories/2008/0924/references
- http://osvdb.org/32283
- http://www.debian.org/security/2007/dsa-1263
- http://secunia.com/advisories/29420
- http://secunia.com/advisories/24332
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
- http://secunia.com/advisories/24425
- http://lists.suse.com/archive/suse-security-announce/2007-Feb/0004.html
- http://security.gentoo.org/glsa/glsa-200703-03.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:043
- http://secunia.com/advisories/24319
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=475
- http://docs.info.apple.com/article.html?artnum=307562
- http://secunia.com/advisories/24183
- http://www.securitytracker.com/id?1017659
- http://www.vupen.com/english/advisories/2007/0623
- https://nvd.nist.gov/vuln/detail/CVE-2007-0897