CVE-2013-2021

EPSS 3.5%
Veröffentlicht 13.05.2013 23:55:02
Zuletzt bearbeitet 29.04.2026 01:13:23
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted length value in an encrypted PDF file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 24

NVD 14 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Canonical ≫ Ubuntu Linux Version10.04 Update- Editionlts

Canonical ≫ Ubuntu Linux Version11.10

Canonical ≫ Ubuntu Linux Version12.04 Update- Editionlts

Canonical ≫ Ubuntu Linux Version12.10

Canonical ≫ Ubuntu Linux Version13.04

Suse ≫ Linux Enterprise Server Version11.0 Updatesp1

Suse ≫ Linux Enterprise Server Version11.0 Updatesp2

Clamav ≫ Clamav Version0.97.1

Clamav ≫ Clamav Version0.97.2

Clamav ≫ Clamav Version0.97.3

Clamav ≫ Clamav Version0.97.4

Clamav ≫ Clamav Version0.97.5

Clamav ≫ Clamav Version0.97.6

Clamav ≫ Clamav Version0.97.7

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.5%	0.877

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html

http://support.apple.com/kb/HT5880

http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html

http://support.apple.com/kb/HT5892

http://blog.clamav.net/2013/04/clamav-0978-has-been-released.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109514.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109639.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109652.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105575.html

http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html

http://lists.opensuse.org/opensuse-updates/2013-06/msg00018.html

http://lists.opensuse.org/opensuse-updates/2013-06/msg00020.html

http://secunia.com/advisories/53150

Vendor Advisory

http://secunia.com/advisories/53182

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2013:159

http://www.openwall.com/lists/oss-security/2013/04/25/2

http://www.openwall.com/lists/oss-security/2013/04/29/20

http://www.securityfocus.com/bid/59434

http://www.ubuntu.com/usn/USN-1816-1

https://bugzilla.clamav.net/show_bug.cgi?id=7053

https://github.com/vrtadmin/clamav-devel/commit/24ff855c82d3f5c62bc5788a5776cefbffce2971

https://nvd.nist.gov/vuln/detail/CVE-2013-2021

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-2021

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-2021

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-2021