Cisco Cisco Secure Web Appliance
At a glance
- Source
- NVD
- EPSS
- EPSS 30.06 % · percentile 98 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- cisco
- NVD status
- Modified
Description
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to execute arbitrary code. This vulnerability is due to a missing buffer size check that may result in a heap buffer overflow write. An attacker could exploit this vulnerability by submitting a crafted HFS+ partition file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the ClamAV scanning process, or else crash the process, resulting in a denial of service (DoS) condition. For a description of this vulnerability, see the ClamAV blog ["https://blog.clamav.net/"].
Weaknesses (CWE)
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | cisco |
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD · psirt@cisco.com (Secondary) |
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2023-24211
- GCVE · GCVE-0-2023-20032
CERT-FR advisories
- CERTFR-2023-AVI-0815 — Multiples vulnérabilités dans les produits Qnap · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0299 — Multiples vulnérabilités StormShield Network Security · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0241 — Multiples vulnérabilités dans les produits Synology · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0189 — Multiples vulnérabilités dans Symantec Web Isolation · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0184 — Multiples vulnérabilités dans Zimbra · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0164 — Multiples vulnérabilités dans Broadcom Symantec Content Analysis · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0160 — Multiples vulnérabilités dans les produits Synology · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0140 — Multiples vulnérabilités dans les produits ClamAV · cert.ssi.gouv.fr
- CERTFR-2023-AVI-0138 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:*< 1.20.2cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:*< 1.21.1cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*< 7.5.9cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*≥ 8.0.1.21160 < 8.1.5cpe:2.3:a:cisco:secure_endpoint_private_cloud:*:*:*:*:*:*:*:*< 3.6.0cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*< 12.5.6cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*≥ 14.0.0 < 14.0.4-005cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*≥ 14.5.0 < 14.5.1-013cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*≥ 15.0.0 < 15.0.0-254cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*≤ 0.103.7cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*≥ 0.104.0 ≤ 0.105.1cpe:2.3:a:clamav:clamav:1.0.0:-:*:*:*:*:*:*cpe:2.3:a:clamav:clamav:1.0.0:rc:*:*:*:*:*:*cpe:2.3:a:clamav:clamav:1.0.0:rc2:*:*:*:*:*:*cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*≥ 3.0.0 < 3.7.35cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*≥ 3.8.0 < 3.11.23cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*≥ 4.3.0 < 4.3.17cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*≥ 4.4.0 < 4.6.4
Affected products
| Product | Versions |
|---|---|
| Cisco · Cisco Secure Web Appliance | affected 11.7.0-406 ; affected 11.7.0-418 ; affected 11.7.1-049 ; affected 11.7.1-006 ; affected 11.7.1-020 ; affected 11.7.2-011 |
| Cisco · Cisco Secure Endpoint | affected 6.1.9 ; affected 6.2.5 ; affected 6.3.7 ; affected 6.3.3 ; affected 7.0.5 ; affected 7.1.1 |
| Cisco · Cisco Secure Endpoint Private Cloud Administration Portal | affected N/A |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |