Published: 05/08/2011 Updated: 13/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV prior to 0.97.2 allows remote malicious users to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.

Vulnerable Product	Search on Vulmon	Subscribe to Product
clamav clamav 0.95.2
clamav clamav 0.86.2
clamav clamav 0.88.5
clamav clamav 0.02
clamav clamav 0.92
clamav clamav 0.95
clamav clamav 0.8
clamav clamav 0.15
clamav clamav 0.90
clamav clamav 0.75.1
clamav clamav 0.65
clamav clamav 0.88.7
clamav clamav 0.81
clamav clamav 0.86
clamav clamav 0.01
clamav clamav 0.92_p0
clamav clamav 0.97
clamav clamav 0.85
clamav clamav 0.84
clamav clamav 0.3
clamav clamav 0.91.2_p0
clamav clamav 0.93.1
clamav clamav 0.95.1
clamav clamav 0.93
clamav clamav 0.70
clamav clamav 0.68.1
clamav clamav 0.96.4
clamav clamav 0.03
clamav clamav 0.87.1
clamav clamav 0.9
clamav clamav 0.74
clamav clamav 0.93.3
clamav clamav 0.88
clamav clamav 0.91
clamav clamav 0.86.1
clamav clamav 0.71
clamav clamav 0.88.1
clamav clamav 0.60p
clamav clamav 0.94
clamav clamav 0.80
clamav clamav 0.91.2
clamav clamav 0.96.3
clamav clamav 0.90.3
clamav clamav 0.85.1
clamav clamav 0.96.2
clamav clamav 0.13
clamav clamav 0.10
clamav clamav 0.94.2
clamav clamav 0.96.1
clamav clamav 0.90.1_p0
clamav clamav 0.12
clamav clamav 0.88.7_p0
clamav clamav 0.23
clamav clamav 0.90.3_p1
clamav clamav 0.60
clamav clamav 0.88.2
clamav clamav 0.83
clamav clamav 0.20
clamav clamav 0.88.4
clamav clamav 0.90.3_p0
clamav clamav 0.14
clamav clamav 0.24
clamav clamav 0.96
clamav clamav 0.90.2_p0
clamav clamav 0.66
clamav clamav 0.96.5
clamav clamav 0.51
clamav clamav 0.52
clamav clamav 0.22
clamav clamav 0.72
clamav clamav 0.75
clamav clamav 0.05
clamav clamav 0.54
clamav clamav 0.87
clamav clamav 0.21
clamav clamav
clamav clamav 0.88.7_p1
clamav clamav 0.67-1
clamav clamav 0.90.1
clamav clamav 0.91.1
clamav clamav 0.95.3
clamav clamav 0.88.3
clamav clamav 0.67
clamav clamav 0.92.1
clamav clamav 0.90.2
clamav clamav 0.68
clamav clamav 0.53
clamav clamav 0.93.2
clamav clamav 0.88.6
clamav clamav 0.94.1
clamav clamav 0.80_rc
clamav clamav 0.82
clamav clamav 0.73

An attacker could send crafted input to ClamAV and cause it to crash ...

CWE-189 https://bugzilla.novell.com/show_bug.cgi?id=708263 http://www.openwall.com/lists/oss-security/2011/07/26/3 http://www.securityfocus.com/bid/48891 http://www.ubuntu.com/usn/USN-1179-1 http://www.openwall.com/lists/oss-security/2011/07/26/13 https://bugzilla.redhat.com/show_bug.cgi?id=725694 http://securitytracker.com/id?1025858 https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2818 http://www.osvdb.org/74181 http://secunia.com/advisories/45382 http://www.mandriva.com/security/advisories?name=MDVSA-2011:122 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html http://secunia.com/advisories/46717 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068940.html http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068941.html https://exchange.xforce.ibmcloud.com/vulnerabilities/68785 http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=4842733eb3f09be61caeed83778bb6679141dbc5 http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.97.2 https://usn.ubuntu.com/1179-1/https://nvd.nist.gov

Get Started

CVE-2011-2721

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect