CVE-2011-3627

Published: Nov 17, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.

Affected (43)

Products: Clamav: Clamav

1 product

Configuration A

43 vulnerable

Vulnerable Software	Affected Versions
Clamav Clamav	Up to 0.97.2
Clamav Clamav	Version 0.90.1
Clamav Clamav	Version 0.90.2
Clamav Clamav	Version 0.90.3
Clamav Clamav	Version 0.90
Clamav Clamav	Version 0.90 rc1.1
Clamav Clamav	Version 0.90 rc1
Clamav Clamav	Version 0.90 rc2
Clamav Clamav	Version 0.90 rc3
Clamav Clamav	Version 0.91.1
Clamav Clamav	Version 0.91.2
Clamav Clamav	Version 0.91
Clamav Clamav	Version 0.91 rc1
Clamav Clamav	Version 0.91 rc2
Clamav Clamav	Version 0.92.1
Clamav Clamav	Version 0.92
Clamav Clamav	Version 0.93.1
Clamav Clamav	Version 0.93.2
Clamav Clamav	Version 0.93.3
Clamav Clamav	Version 0.93
Clamav Clamav	Version 0.94.1
Clamav Clamav	Version 0.94.2
Clamav Clamav	Version 0.94
Clamav Clamav	Version 0.95.1
Clamav Clamav	Version 0.95.2
Clamav Clamav	Version 0.95.3
Clamav Clamav	Version 0.95
Clamav Clamav	Version 0.95 rc1
Clamav Clamav	Version 0.95 rc2
Clamav Clamav	Version 0.95 src1
Clamav Clamav	Version 0.95 src2
Clamav Clamav	Version 0.96.1
Clamav Clamav	Version 0.96.2
Clamav Clamav	Version 0.96.3
Clamav Clamav	Version 0.96.4
Clamav Clamav	Version 0.96.5
Clamav Clamav	Version 0.96
Clamav Clamav	Version 0.96 rc1
Clamav Clamav	Version 0.96 rc2
Clamav Clamav	Version 0.97.1
Clamav Clamav	Version 0.97
Clamav Clamav	Version 0.97 rc
Clamav Clamav	Version 0.9 rc1

Related CWEs

References (20)

http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commitdiff%3Bh=3d664817f6ef833a17414a4ecea42004c35cc42f

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068940.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068941.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html

Source: secalert@redhat.com

http://secunia.com/advisories/46717

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/46826

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2011/10/18/1

Source: secalert@redhat.com

http://www.securityfocus.com/bid/50183

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1258-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=746984

Source: secalert@redhat.com

http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commitdiff%3Bh=3d664817f6ef833a17414a4ecea42004c35cc42f

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068940.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068941.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/46717

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/46826

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2011/10/18/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/50183

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1258-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=746984

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.