WID-SEC-W-2024-0322

WID-SEC-W-2024-0322 PUBLISHED CVSS 9.300000190734863 CRITICAL

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in ClamAV ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder beliebigen Code auszuführen.

Risk Scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
	Cisco Secure Endpoint Connector < 7.5.17
	Cisco Secure Endpoint Connector < 8.2.1
	Cisco Secure Endpoint Private Cloud < 3.8.0
	Open Source ClamAV < 1.2.2
	Ubuntu Linux
	Fedora Linux
	Open Source ClamAV < 1.0.5

Exploit Intelligence

https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0322.json (circl)
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0322 (circl)
http://blog.clamav.net/2023/11/clamav-130-122-105-released.html (circl)
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-hDffu6t (circl)
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-471565274b (circl)
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3439911df6 (circl)
https://bodhi.fedoraproject.org/updates/FEDORA-2024-c42cf0e576 (circl)
https://ubuntu.com/security/notices/USN-6636-1 (circl)

Timeline

Feb 7, 2024 CVE Published
Feb 14, 2024 CVE Updated
Mar 31, 2026 Distribution Patch

References

https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0322.json advisory
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0322 advisory
http://blog.clamav.net/2023/11/clamav-130-122-105-released.html url
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-hDffu6t url
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-471565274b url
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3439911df6 url
https://bodhi.fedoraproject.org/updates/FEDORA-2024-c42cf0e576 url
https://ubuntu.com/security/notices/USN-6636-1 url

Open in Interactive Console →