VDB
CVE-2011-3627
CVE-2011-3627
PUBLISHED
CVSS 4.300000190734863 MEDIUM
The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.
EPSS 2.64% · 85.0th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
2.64%
85.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| clamav | clamav | 0.9, 0.90, 0.90 |
Timeline
- Nov 17, 2011 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 10, 2023 EPSS Score
References
- http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commitdiff%3Bh=3d664817f6ef833a17414a4ecea42004c35cc42f url
- https://bugzilla.redhat.com/show_bug.cgi?id=746984 url
- [oss-security] 20111018 CVE request: recursion level crash in clamav before 0.97.3 mailing-list
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068940.html technical
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068941.html technical
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html technical
- http://secunia.com/advisories/46717 advisory
- http://www.securityfocus.com/bid/50183 technical
- http://secunia.com/advisories/46826 advisory
- http://www.ubuntu.com/usn/USN-1258-1 technical
- https://nvd.nist.gov/vuln/detail/CVE-2011-3627 advisory
- http://git.clamav.net/gitweb?p=clamav-devel.git;a=commitdiff;h=3d664817f6ef833a17414a4ecea42004c35cc42f url