Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ClamAV畸形CAB文件远程拒绝服务漏洞
Vulnerability Description
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV处理畸形CAB文件时存在漏洞，远程攻击者可能利用此漏洞对ClamAV执行拒绝服务攻击。 ClamAV在处理CAB文件时，如果遇到记录长度为0的cabinet头，ClamAV就会在未关闭本地文件描述符的情况下便从函数返回。攻击者可以多次触发这个漏洞，最终导致用尽几乎所有可用的文件描述符，ClamAV无法扫描大多数文档，包括zip和tar文件，从而降低扫描服务的功能。
CVSS Information
N/A
Vulnerability Type
N/A