Vulnerability in Clamav

CVE-2011-2721

Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.

EPSS: 0.034 (87.5th percentile) — read the EPSS interpretation.

Affected products

  • Clamav — versions 0.01, 0.02, 0.3
  • N/a — versions n/a

Weakness classification (CWE)

References