CVE-2013-7089
published 2019-11-15CVE-2013-7089: ClamAV before 0.97.7: dbg_printhex possible information leak
PriorityP434high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
1.94%
78.0th percentile
ClamAV before 0.97.7: dbg_printhex possible information leak
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| clamav | clamav | < 0.97.7 | 0.97.7 |
| clamav | clamav | >= 0 < 0.97.7+dfsg-1 | 0.97.7+dfsg-1 |
| clamav | clamav | >= 0 < 0.97.7+dfsg-1 | 0.97.7+dfsg-1 |
| clamav | clamav | >= 0 < 0.97.7+dfsg-1 | 0.97.7+dfsg-1 |
| clamav | clamav | >= 0 < 0.97.7+dfsg-1 | 0.97.7+dfsg-1 |
| debian | clamav | < clamav 0.97.7+dfsg-1 (bookworm) | clamav 0.97.7+dfsg-1 (bookworm) |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv7.5HIGH
vendor_debian7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2013-7089: clamav - ClamAV before 0.97.7: dbg_printhex possible information leak
vendor_debian·2013·CVSS 7.5
CVE-2013-7089 [HIGH] CVE-2013-7089: clamav - ClamAV before 0.97.7: dbg_printhex possible information leak
ClamAV before 0.97.7: dbg_printhex possible information leak
Scope: local
bookworm: resolved (fixed in 0.97.7+dfsg-1)
bullseye: resolved (fixed in 0.97.7+dfsg-1)
forky: resolved (fixed in 0.97.7+dfsg-1)
sid: resolved (fixed in 0.97.7+dfsg-1)
trixie: resolved (fixed in 0.97.7+dfsg-1)
GHSA
GHSA-6mpc-7r8q-fcvf: ClamAV before 0
ghsa_unreviewed·2022-05-05
CVE-2013-7089 [HIGH] CWE-200 GHSA-6mpc-7r8q-fcvf: ClamAV before 0
ClamAV before 0.97.7: dbg_printhex possible information leak
OSV
CVE-2013-7089: ClamAV before 0
osv·2019-11-15·CVSS 7.5
CVE-2013-7089 [HIGH] CVE-2013-7089: ClamAV before 0
ClamAV before 0.97.7: dbg_printhex possible information leak
No detection rules found.
No public exploits indexed.
http://security.gentoo.org/glsa/glsa-201405-08.xmlhttp://www.openwall.com/lists/oss-security/2013/12/13/1https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7089https://security-tracker.debian.org/tracker/CVE-2013-7089http://security.gentoo.org/glsa/glsa-201405-08.xmlhttp://www.openwall.com/lists/oss-security/2013/12/13/1https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7089https://security-tracker.debian.org/tracker/CVE-2013-7089
2019-11-15
Published