CVE-2005-3501
published 2005-11-05CVE-2005-3501: The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of…
PriorityP416medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
3.59%
88.1th percentile
The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted CAB file that causes cabd_find to be called with a zero length.
Affected
52 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| clamav | clamav | <= 0.87 | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv4.3MEDIUM
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2005-3501: clamav - The cabd_find function in cabd.c of the libmspack library (mspack) for Clam Anti...
vendor_debian·2005·CVSS 4.3
CVE-2005-3501 [MEDIUM] CVE-2005-3501: clamav - The cabd_find function in cabd.c of the libmspack library (mspack) for Clam Anti...
The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted CAB file that causes cabd_find to be called with a zero length.
Scope: local
bookworm: resolved (fixed in 0.87.1-1)
bullseye: resolved (fixed in 0.87.1-1)
forky: resolved (fixed in 0.87.1-1)
sid: resolved (fixed in 0.87.1-1)
trixie: resolved (fixed in 0.87.1-1)
GHSA
GHSA-xwpj-f6qv-5j98: The cabd_find function in cabd
ghsa_unreviewed·2022-05-01
CVE-2005-3501 [MEDIUM] GHSA-xwpj-f6qv-5j98: The cabd_find function in cabd
The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted CAB file that causes cabd_find to be called with a zero length.
OSV
CVE-2005-3501: The cabd_find function in cabd
osv·2005-11-05·CVSS 4.3
CVE-2005-3501 [MEDIUM] CVE-2005-3501: The cabd_find function in cabd
The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted CAB file that causes cabd_find to be called with a zero length.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/17184http://secunia.com/advisories/17434http://secunia.com/advisories/17451http://secunia.com/advisories/17501http://secunia.com/advisories/17559http://securityreason.com/securityalert/150http://securitytracker.com/id?1015154http://sourceforge.net/project/shownotes.php?release_id=368319http://www.debian.org/security/2005/dsa-887http://www.gentoo.org/security/en/glsa/glsa-200511-04.xmlhttp://www.idefense.com/application/poi/display?id=334&type=vulnerabilitieshttp://www.mandriva.com/security/advisories?name=MDKSA-2005:205http://www.osvdb.org/20484http://www.securityfocus.com/bid/15317http://www.vupen.com/english/advisories/2005/2294http://secunia.com/advisories/17184http://secunia.com/advisories/17434http://secunia.com/advisories/17451http://secunia.com/advisories/17501http://secunia.com/advisories/17559http://securityreason.com/securityalert/150http://securitytracker.com/id?1015154http://sourceforge.net/project/shownotes.php?release_id=368319http://www.debian.org/security/2005/dsa-887http://www.gentoo.org/security/en/glsa/glsa-200511-04.xmlhttp://www.idefense.com/application/poi/display?id=334&type=vulnerabilitieshttp://www.mandriva.com/security/advisories?name=MDKSA-2005:205http://www.osvdb.org/20484http://www.securityfocus.com/bid/15317http://www.vupen.com/english/advisories/2005/2294
2005-11-05
Published