DeutschShown in its original language — a full translation is planned for a future version.
ClamAV und Cisco Secure Endpoint: Schwachstelle ermöglicht Denial of Service
view advisory published 2025-01-22
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ClamAV und Cisco Secure Endpoint ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-20128US | high7.5 | — | ||
A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) conditi… | ||||
02
references
External citations — patches, advisories, analysis.
- ClamAV Release 1.0.8 vom 2025-01-22external
- ClamAV Release 1.4.2 vom 2025-01-22external
- Debian Security Advisory DLA-4292 vom 2025-09-04external
- SUSE Security Update SUSE-SU-2025:0328-1 vom 2025-02-03external
- SUSE Security Update SUSE-SU-2025:0327-1 vom 2025-02-03external
- SUSE Security Update SUSE-SU-2025:0325-1 vom 2025-02-03external
- Cisco Security Advisory cisco-sa-clamav-ole2-H549rphA vom 2025-01-22external
- Ubuntu Security Notice USN-7229-1 vom 2025-01-27external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan