CVE-2011-3627

ClamAV < 0.97.3 - Denial of Service via Bytecode Engine Recursion

Title source: llm
STIX 2.1

Description

The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.

References (10)

Core 10
Core References
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068942.html
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=746984
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/50183
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46717
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46826
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068940.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/068941.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1258-1
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/10/18/1

Scores

EPSS 0.0264
EPSS Percentile 83.8%

Details

CWE
CWE-189
Status published
Products (30)
clamav/clamav 0.9 rc1
clamav/clamav 0.90 (5 CPE variants)
clamav/clamav 0.90.1
clamav/clamav 0.90.2
clamav/clamav 0.90.3
clamav/clamav 0.91 (3 CPE variants)
clamav/clamav 0.91.1
clamav/clamav 0.91.2
clamav/clamav 0.92
clamav/clamav 0.92.1
... and 20 more
Published Nov 17, 2011
Tracked Since Feb 18, 2026