CVE-2013-6497
published 2014-12-01CVE-2013-6497: clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.
PriorityP410low2.1CVSS 2.0
AVLACLAuNCNINAP
EPSS
1.13%
63.1th percentile
clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| clamav | clamav | <= 0.98.4 | — |
| clamav | clamav | >= 0 < 0.98.5+dfsg-1 | 0.98.5+dfsg-1 |
| clamav | clamav | >= 0 < 0.98.5+dfsg-1 | 0.98.5+dfsg-1 |
| clamav | clamav | >= 0 < 0.98.5+dfsg-1 | 0.98.5+dfsg-1 |
| clamav | clamav | >= 0 < 0.98.5+dfsg-1 | 0.98.5+dfsg-1 |
| clamav | clamav | >= 0 < 0.98.5+addedllvm-0ubuntu0.14.04.1 | 0.98.5+addedllvm-0ubuntu0.14.04.1 |
| debian | clamav | < clamav 0.98.5+dfsg-1 (bookworm) | clamav 0.98.5+dfsg-1 (bookworm) |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv2.1LOW
vendor_debian2.1LOW
vendor_ubuntu2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jfxp-x34q-78xp: clamscan in ClamAV before 0
ghsa_unreviewed·2022-05-17
CVE-2013-6497 [LOW] GHSA-jfxp-x34q-78xp: clamscan in ClamAV before 0
clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.
OSV
CVE-2013-6497: clamscan in ClamAV before 0
osv·2014-12-01·CVSS 2.1
CVE-2013-6497 [LOW] CVE-2013-6497: clamscan in ClamAV before 0
clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.
OSV
clamav vulnerabilities
osv·2014-11-26·CVSS 2.1
CVE-2013-6497 [LOW] clamav vulnerabilities
clamav vulnerabilities
Kurt Seifried discovered that ClamAV incorrectly handled certain JavaScript
files. An attacker could possibly use this issue to cause ClamAV to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2013-6497)
Damien Millescamp discovered that ClamAV incorrectly handled certain PE
files. An attacker could possibly use this issue to cause ClamAV to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2014-9050)
Ubuntu
ClamAV vulnerability
vendor_ubuntu·2015-02-12
CVE-2013-6497 ClamAV vulnerability
Title: ClamAV vulnerability
Summary: ClamAV could be made to crash or run programs if it processed a
specially crafted file.
USN-2488-1 fixed a vulnerability in ClamAV for Ubuntu 14.10, Ubuntu
14.04 LTS, and Ubuntu 12.04 LTS. This update provides the corresponding
update for Ubuntu 10.04 LTS.
Original advisory details:
Sebastian Andrzej Siewior discovered that ClamAV incorrectly handled
certain upack packer files. An attacker could possibly use this issue to
cause ClamAV to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Instructions: This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.
Ubuntu
ClamAV vulnerabilities
vendor_ubuntu·2014-11-26·CVSS 2.1
CVE-2013-6497 [LOW] ClamAV vulnerabilities
Title: ClamAV vulnerabilities
Summary: ClamAV could be made to crash or run programs if it processed a specially
crafted file.
Kurt Seifried discovered that ClamAV incorrectly handled certain JavaScript
files. An attacker could possibly use this issue to cause ClamAV to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2013-6497)
Damien Millescamp discovered that ClamAV incorrectly handled certain PE
files. An attacker could possibly use this issue to cause ClamAV to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2014-9050)
Instructions: This update uses a new upstream release, which includes additional bug
fixes. In general, a standard system update will make all the necessary
changes.
Debian
CVE-2013-6497: clamav - clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers ...
vendor_debian·2013·CVSS 2.1
CVE-2013-6497 [LOW] CVE-2013-6497: clamav - clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers ...
clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.
Scope: local
bookworm: resolved (fixed in 0.98.5+dfsg-1)
bullseye: resolved (fixed in 0.98.5+dfsg-1)
forky: resolved (fixed in 0.98.5+dfsg-1)
sid: resolved (fixed in 0.98.5+dfsg-1)
trixie: resolved (fixed in 0.98.5+dfsg-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-6497 ClamAV: -a segmentation fault when processing files [epel-all]
bugzilla·2014-11-19·CVSS 2.1
CVE-2013-6497 [LOW] CVE-2013-6497 ClamAV: -a segmentation fault when processing files [epel-all]
CVE-2013-6497 ClamAV: -a segmentation fault when processing files [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions
Bugzilla
CVE-2013-6497 ClamAV: -a segmentation fault when processing files [fedora-all]
bugzilla·2014-11-19·CVSS 2.1
CVE-2013-6497 [LOW] CVE-2013-6497 ClamAV: -a segmentation fault when processing files [fedora-all]
CVE-2013-6497 ClamAV: -a segmentation fault when processing files [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of
Bugzilla
CVE-2013-6497 ClamAV: -a segmentation fault when processing files
bugzilla·2014-09-04·CVSS 2.1
CVE-2013-6497 [LOW] CVE-2013-6497 ClamAV: -a segmentation fault when processing files
CVE-2013-6497 ClamAV: -a segmentation fault when processing files
Kurt Seifried of Red Hat reports:
the jwplayer.js file causes ClamAV to seg fault when scanned with the -a (list
archived files).
Discussion:
This is now public: http://seclists.org/oss-sec/2014/q4/673
---
Created clamav tracking bugs for this issue:
Affects: fedora-all [bug 1165526]
---
Created clamav tracking bugs for this issue:
Affects: epel-all [bug 1165527]
---
clamav-0.98.5-1.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
---
clamav-0.98.5-1.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report.
---
clamav-0.98.5-1.el5 has been pushed to the Fedora EPEL
Bugzilla
CVE-2012-6497 rubygem-authlogic: potential unsafe find_by_id method calls
bugzilla·2013-01-04·CVSS 7.5
CVE-2012-6497 [HIGH] CVE-2012-6497 rubygem-authlogic: potential unsafe find_by_id method calls
CVE-2012-6497 rubygem-authlogic: potential unsafe find_by_id method calls
Common Vulnerabilities and Exposures assigned an identifier CVE-2012-6497 to
the following vulnerability:
Name: CVE-2012-6497
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6497
Assigned: 20130103
Reference: http://openwall.com/lists/oss-security/2013/01/03/12
Reference: http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts/
Reference: http://phenoelit.org/blog/archives/2012/12/21/let_me_github_that_for_you/index.html
The Authlogic gem for Ruby on Rails, when used with certain versions
before 3.2.10, makes potentially unsafe find_by_id method calls, which
might allow remote attackers to conduct CVE-2012-6496 SQL injection
attacks via a crafted paramete
http://blog.clamav.net/2014/11/clamav-0985-has-been-released.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-November/144754.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-November/144979.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-12/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-12/msg00007.htmlhttp://secunia.com/advisories/59645http://secunia.com/advisories/60150http://www.mandriva.com/security/advisories?name=MDVSA-2014:217http://www.openwall.com/lists/oss-security/2014/11/19/2http://www.openwall.com/lists/oss-security/2014/11/19/5http://www.securityfocus.com/bid/71178http://www.ubuntu.com/usn/USN-2423-1http://www.ubuntu.com/usn/USN-2488-2https://bugzilla.clamav.net/show_bug.cgi?id=11088https://bugzilla.redhat.com/show_bug.cgi?id=1138101https://exchange.xforce.ibmcloud.com/vulnerabilities/98804http://blog.clamav.net/2014/11/clamav-0985-has-been-released.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-November/144754.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-November/144979.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-12/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2014-12/msg00007.htmlhttp://secunia.com/advisories/59645http://secunia.com/advisories/60150http://www.mandriva.com/security/advisories?name=MDVSA-2014:217http://www.openwall.com/lists/oss-security/2014/11/19/2http://www.openwall.com/lists/oss-security/2014/11/19/5http://www.securityfocus.com/bid/71178http://www.ubuntu.com/usn/USN-2423-1http://www.ubuntu.com/usn/USN-2488-2https://bugzilla.clamav.net/show_bug.cgi?id=11088https://bugzilla.redhat.com/show_bug.cgi?id=1138101https://exchange.xforce.ibmcloud.com/vulnerabilities/98804
2014-12-01
Published