CVE-2023-20197
Description
A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .
How to fix
- cisco secure_endpoint1.22.0, 7.5.13.21586, 8.1.7.21585 or later
- cisco secure_endpoint_private_cloud3.8.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure_endpoint | v < 1.22.0, v < 7.5.13.21586, 8.0.1.21160 ≤ v < 8.1.7.21585 | 1.22.0, 7.5.13.21586, 8.1.7.21585 |
| cisco secure_endpoint_private_cloud | v < 3.8.0 | 3.8.0 |
| fedoraproject fedora | 38 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.