VDB

CVE-2016-1405

CVE-2016-1405 PUBLISHED CVSS 7.5 HIGH

libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service (AMP process restart) via a crafted document, aka Bug IDs CSCuv78533 and CSCuw60503.

EPSS 3.41% · 88.4th percentile

Risk Scores

CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
3.41%
88.4th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSclamav0.98.7+dfsg-0ubuntu0.14.04.1, 0.98.1+dfsg-1ubuntu5, 0.98.1+dfsg-2ubuntu2
Ubuntu:16.04:LTSclamav0.98.7+dfsg-0ubuntu4, 0.98.7+dfsg-0ubuntu5, 0.99+dfsg-1ubuntu1

Timeline

  • May 31, 2016 CVE Published
  • Feb 4, 2022 EPSS Score
  • May 21, 2022 EPSS Score
  • Jul 13, 2022 EPSS Score
  • Oct 28, 2022 EPSS Score
  • Dec 20, 2022 EPSS Score
  • Apr 5, 2023 EPSS Score
  • May 28, 2023 EPSS Score
  • Sep 11, 2023 EPSS Score
  • Nov 3, 2023 EPSS Score
  • Feb 17, 2024 EPSS Score
  • Jun 2, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›