Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2013-6497
HistoryDec 01, 2014 - 3:59 p.m.

CVE-2013-6497

2014-12-0115:59:00
CWE-17
redhat
web.nvd.nist.gov
40
cve
clamav
denial of service
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.118

Percentile

95.4%

JSON

clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.

Affected configurations

Nvd
Node
clamavclamavRange≤0.98.4
VendorProductVersionCPE
clamavclamav*cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*

References

Related

ubuntucve 1
amazon 1
nessus 13
debiancve 1
prion 1
openvas 14
fedora 3
archlinux 1
cvelist 1
nvd 1
debian 1
osv 2
ubuntu 2
suse 4
securityvulns 2
mageia 1
ubuntucve
ubuntucve
CVE-2013-6497
2013-12-31 00:00:00
amazon
amazon
Low: clamav
2014-12-08 13:12:00
nessus
nessus
Fedora 20 : clamav-0.98.5-1.fc20 (2014-15473)
2014-11-24 00:00:00
Amazon Linux AMI : clamav (ALAS-2014-457)
2014-12-10 00:00:00
Mandriva Linux Security Advisory : clamav (MDVSA-2014:217)
2014-11-21 00:00:00
debiancve
debiancve
CVE-2013-6497
2014-12-01 15:59:00
prion
prion
Code injection
2014-12-01 15:59:00
openvas
openvas
Fedora Update for clamav FEDORA-2014-15473
2014-11-23 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-457)
2015-09-08 00:00:00
Fedora Update for clamav FEDORA-2014-15434
2015-01-05 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: clamav-0.98.5-1.fc20
2014-11-22 12:39:19
[SECURITY] Fedora 21 Update: clamav-0.98.5-1.fc21
2014-12-06 10:32:13
[SECURITY] Fedora 19 Update: clamav-0.98.5-1.fc19
2014-11-27 08:37:32
archlinux
archlinux
clamav: denial of service
2014-11-20 00:00:00
cvelist
cvelist
CVE-2013-6497
2014-12-01 15:00:00
nvd
nvd
CVE-2013-6497
2014-12-01 15:59:00
debian
debian
[SECURITY] [DLA 95-1] clamav security update
2014-12-02 21:37:10
osv
osv
clamav - security update
2014-12-02 00:00:00
clamav-0.99.2-4.1 on GA media
2024-06-15 00:00:00
ubuntu
ubuntu
ClamAV vulnerability
2015-02-12 00:00:00
ClamAV vulnerabilities
2014-11-26 00:00:00
suse
suse
Security update for clamav (important)
2014-12-05 21:04:59
Security update for clamav (important)
2014-12-05 10:04:48
Security update for clamav (important)
2014-12-21 19:04:40
securityvulns
securityvulns
[USN-2423-1] ClamAV vulnerabilities
2014-11-30 00:00:00
ClamAV memory corruptions
2014-11-30 00:00:00
mageia
mageia
Updated clamav packages fix security vulnerabilities
2014-11-26 13:14:01

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.118

Percentile

95.4%

JSON
Related for CVE-2013-6497
ubuntucve1amazon1nessus13debiancve1prion1openvas14fedora3archlinux1cvelist1nvd1debian1osv2ubuntu2suse4securityvulns2mageia1