Cisco Cisco Secure Web Appliance
En bref
- Source
- NVD
- EPSS
- EPSS 30.06 % · centile 98 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- cisco
- Statut NVD
- Modified
Description
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to execute arbitrary code. This vulnerability is due to a missing buffer size check that may result in a heap buffer overflow write. An attacker could exploit this vulnerability by submitting a crafted HFS+ partition file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the ClamAV scanning process, or else crash the process, resulting in a denial of service (DoS) condition. For a description of this vulnerability, see the ClamAV blog ["https://blog.clamav.net/"].
Faiblesses (CWE)
- CWE-120 — Copie de tampon sans vérification de taille (débordement classique)
- CWE-787 — Écriture hors limites
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | cisco |
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD · psirt@cisco.com (Secondary) |
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2023-24211
- GCVE · GCVE-0-2023-20032
Avis du CERT-FR
- CERTFR-2023-AVI-0815 — Multiples vulnérabilités dans les produits Qnap · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0299 — Multiples vulnérabilités StormShield Network Security · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0241 — Multiples vulnérabilités dans les produits Synology · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0189 — Multiples vulnérabilités dans Symantec Web Isolation · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0184 — Multiples vulnérabilités dans Zimbra · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0164 — Multiples vulnérabilités dans Broadcom Symantec Content Analysis · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0160 — Multiples vulnérabilités dans les produits Synology · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0140 — Multiples vulnérabilités dans les produits ClamAV · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0138 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:*< 1.20.2cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:*< 1.21.1cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*< 7.5.9cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*≥ 8.0.1.21160 < 8.1.5cpe:2.3:a:cisco:secure_endpoint_private_cloud:*:*:*:*:*:*:*:*< 3.6.0cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*< 12.5.6cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*≥ 14.0.0 < 14.0.4-005cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*≥ 14.5.0 < 14.5.1-013cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*≥ 15.0.0 < 15.0.0-254cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*≤ 0.103.7cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*≥ 0.104.0 ≤ 0.105.1cpe:2.3:a:clamav:clamav:1.0.0:-:*:*:*:*:*:*cpe:2.3:a:clamav:clamav:1.0.0:rc:*:*:*:*:*:*cpe:2.3:a:clamav:clamav:1.0.0:rc2:*:*:*:*:*:*cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*≥ 3.0.0 < 3.7.35cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*≥ 3.8.0 < 3.11.23cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*≥ 4.3.0 < 4.3.17cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*≥ 4.4.0 < 4.6.4
Produits affectés
| Produit | Versions |
|---|---|
| Cisco · Cisco Secure Web Appliance | affected 11.7.0-406 ; affected 11.7.0-418 ; affected 11.7.1-049 ; affected 11.7.1-006 ; affected 11.7.1-020 ; affected 11.7.2-011 |
| Cisco · Cisco Secure Endpoint | affected 6.1.9 ; affected 6.2.5 ; affected 6.3.7 ; affected 6.3.3 ; affected 7.0.5 ; affected 7.1.1 |
| Cisco · Cisco Secure Endpoint Private Cloud Administration Portal | affected N/A |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |