CVE-2019-15961 (CNNVD-201911-1262)
中文标题:
Clam AntiVirus 资源管理错误漏洞
英文标题:
Clam AntiVirus (ClamAV) Software Email Parsing Vulnerability
漏洞描述
中文描述:
Clam AntiVirus是ClamAV团队的一款用于检测木马，病毒，恶意软件和其他恶意威胁的开源杀毒引擎。 Clam AntiVirus 0.102.1之前版本和0.101.5之前版本中存在资源管理错误漏洞。攻击者可利用该漏洞造成拒绝服务。
英文描述:
A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing routines that result in extremely long scan times of specially formatted email files. An attacker could exploit this vulnerability by sending a crafted email file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to scan the crafted email file indefinitely, resulting in a denial of service condition.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| ClamAV | ClamAV | - | ≤ 0.102.0 | - |
cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*
|
| clamav | clamav | * | - | - |
cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*
|
| clamav | clamav | 0.102.0 | - | - |
cpe:2.3:a:clamav:clamav:0.102.0:*:*:*:*:*:*:*
|
| cisco | email_security_appliance_firmware | 11.1.1-042 | - | - |
cpe:2.3:o:cisco:email_security_appliance_firmware:11.1.1-042:*:*:*:*:*:*:*
|
| cisco | email_security_appliance_firmware | 11.1.2-023 | - | - |
cpe:2.3:o:cisco:email_security_appliance_firmware:11.1.2-023:*:*:*:*:*:*:*
|
| canonical | ubuntu_linux | 12.04 | - | - |
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
|
| canonical | ubuntu_linux | 14.04 | - | - |
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
|
| debian | debian_linux | 8.0 | - | - |
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.1 (cna)
HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2019-15961 |
2025-11-11 15:20:04 | 2025-11-11 07:35:36 |
| NVD | nvd_CVE-2019-15961 |
2025-11-11 14:56:31 | 2025-11-11 07:44:08 |
| CNNVD | cnnvd_CNNVD-201911-1262 |
2025-11-11 15:10:19 | 2025-11-11 07:55:05 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 资源管理错误
- cnnvd_id: 未提取 -> CNNVD-201911-1262
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 2 -> 8
- data_sources: ['cve'] -> ['cve', 'nvd']