CVE-2005-1922
clamav - denial of service and privilege escalation
EPSS 2.5%
描述
The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.
如何修補 CVE-2005-1922
要修補 CVE-2005-1922,請將受影響套件升級到下列已修補版本。
- Debian/clamav—升級至 0.86.1-1 或更新版本
- Debian/clamav—升級至 0.84-2.sarge.1 或更新版本
- Debian/clamav—升級至 0.86.2-4etch1 或更新版本
CVE-2005-1922 正在被利用嗎?
低 — EPSS 為 2.5%,目前沒有觀察到大規模利用活動。
受影響套件(3)
- from 0, < 0.86.1-1
- from 0, < 0.84-2.sarge.1
- from 0, < 0.86.2-4etch1