5

CVE-2013-2020

Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.

Data is provided by the National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version10.04 Update- Editionlts
Canonical ≫ Ubuntu Linux Version11.10
Canonical ≫ Ubuntu Linux Version12.04 Update- Editionlts
Canonical ≫ Ubuntu Linux Version12.10
Canonical ≫ Ubuntu Linux Version13.04
Suse ≫ Linux Enterprise Server Version11.0 Updatesp1
Suse ≫ Linux Enterprise Server Version11.0 Updatesp2
Clamav ≫ Clamav Version <= 0.97.7
Clamav ≫ Clamav Version0.9 Updaterc1
Clamav ≫ Clamav Version0.90
Clamav ≫ Clamav Version0.90 Updaterc1
Clamav ≫ Clamav Version0.90 Updaterc1.1
Clamav ≫ Clamav Version0.90 Updaterc2
Clamav ≫ Clamav Version0.90 Updaterc3
Clamav ≫ Clamav Version0.90.1
Clamav ≫ Clamav Version0.90.1_p0
Clamav ≫ Clamav Version0.90.2
Clamav ≫ Clamav Version0.90.2_p0
Clamav ≫ Clamav Version0.90.3
Clamav ≫ Clamav Version0.90.3_p0
Clamav ≫ Clamav Version0.90.3_p1
Clamav ≫ Clamav Version0.91
Clamav ≫ Clamav Version0.91 Updaterc1
Clamav ≫ Clamav Version0.91 Updaterc2
Clamav ≫ Clamav Version0.91.1
Clamav ≫ Clamav Version0.91.2
Clamav ≫ Clamav Version0.91.2_p0
Clamav ≫ Clamav Version0.92
Clamav ≫ Clamav Version0.92.1
Clamav ≫ Clamav Version0.92_p0
Clamav ≫ Clamav Version0.93
Clamav ≫ Clamav Version0.93.1
Clamav ≫ Clamav Version0.93.2
Clamav ≫ Clamav Version0.93.3
Clamav ≫ Clamav Version0.94
Clamav ≫ Clamav Version0.94.1
Clamav ≫ Clamav Version0.94.2
Clamav ≫ Clamav Version0.95
Clamav ≫ Clamav Version0.95 Updaterc1
Clamav ≫ Clamav Version0.95 Updaterc2
Clamav ≫ Clamav Version0.95 Updatesrc1
Clamav ≫ Clamav Version0.95 Updatesrc2
Clamav ≫ Clamav Version0.95.1
Clamav ≫ Clamav Version0.95.2
Clamav ≫ Clamav Version0.95.3
Clamav ≫ Clamav Version0.96
Clamav ≫ Clamav Version0.96 Updaterc1
Clamav ≫ Clamav Version0.96 Updaterc2
Clamav ≫ Clamav Version0.96.1
Clamav ≫ Clamav Version0.96.2
Clamav ≫ Clamav Version0.96.3
Clamav ≫ Clamav Version0.96.4
Clamav ≫ Clamav Version0.96.5
Clamav ≫ Clamav Version0.97
Clamav ≫ Clamav Version0.97 Updaterc
Clamav ≫ Clamav Version0.97.1
Clamav ≫ Clamav Version0.97.2
Clamav ≫ Clamav Version0.97.3
Clamav ≫ Clamav Version0.97.4
Clamav ≫ Clamav Version0.97.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 12.07% 0.936
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P