CVEvulnerability
CVE-2013-2020
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-05-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-189
Description
Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.
Affected configurations
• canonical ubuntu linux 10.04
• canonical ubuntu linux 11.10
• canonical ubuntu linux 12.04
• canonical ubuntu linux 12.10
• canonical ubuntu linux 13.04
• suse linux enterprise server 11.0
• clamav clamav (<= 0.97.7)
• clamav clamav 0.9
• clamav clamav 0.90
• clamav clamav 0.90.1
• clamav clamav 0.90.1 p0
• clamav clamav 0.90.2
• clamav clamav 0.90.2 p0
• clamav clamav 0.90.3
• clamav clamav 0.90.3 p0
• clamav clamav 0.90.3 p1
• clamav clamav 0.91
• clamav clamav 0.91.1
• clamav clamav 0.91.2
• clamav clamav 0.91.2 p0
• clamav clamav 0.92
• clamav clamav 0.92.1
• clamav clamav 0.92 p0
• clamav clamav 0.93
• clamav clamav 0.93.1
• clamav clamav 0.93.2
• clamav clamav 0.93.3
• clamav clamav 0.94
• clamav clamav 0.94.1
• clamav clamav 0.94.2
• clamav clamav 0.95
• clamav clamav 0.95.1
• clamav clamav 0.95.2
• clamav clamav 0.95.3
• clamav clamav 0.96
• clamav clamav 0.96.1
• clamav clamav 0.96.2
• clamav clamav 0.96.3
• clamav clamav 0.96.4
• clamav clamav 0.96.5
• clamav clamav 0.97
• clamav clamav 0.97.1
• clamav clamav 0.97.2
• clamav clamav 0.97.3
• clamav clamav 0.97.4
• clamav clamav 0.97.5
Related
Weakness · not in database (1)
References
- http://blog.clamav.net/2013/04/clamav-0978-has-been-released.html Patch
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html lists.apple.com
- http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109514.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109639.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109652.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105575.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00020.html lists.opensuse.org
- http://secunia.com/advisories/53150 Vendor Advisory
- http://secunia.com/advisories/53182 Vendor Advisory
- http://support.apple.com/kb/HT5880 support.apple.com
- http://support.apple.com/kb/HT5892 support.apple.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:159 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2013/04/25/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2013/04/29/20 www.openwall.com
- http://www.securityfocus.com/bid/59434 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1816-1 www.ubuntu.com
- https://bugzilla.clamav.net/show_bug.cgi?id=7055 bugzilla.clamav.net
- https://github.com/vrtadmin/clamav-devel/commit/270e368b99e93aa5447d46c797c92c3f9f39f375 github.com
- http://blog.clamav.net/2013/04/clamav-0978-has-been-released.html Patch
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html lists.apple.com
- http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109514.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109639.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109652.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105575.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00020.html lists.opensuse.org
- http://secunia.com/advisories/53150 Vendor Advisory
- http://secunia.com/advisories/53182 Vendor Advisory
- http://support.apple.com/kb/HT5880 support.apple.com
- http://support.apple.com/kb/HT5892 support.apple.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:159 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2013/04/25/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2013/04/29/20 www.openwall.com
- http://www.securityfocus.com/bid/59434 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1816-1 www.ubuntu.com
- https://bugzilla.clamav.net/show_bug.cgi?id=7055 bugzilla.clamav.net
- https://github.com/vrtadmin/clamav-devel/commit/270e368b99e93aa5447d46c797c92c3f9f39f375 github.com