ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2026-20214

Cisco Secure Endpoint

ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability

CVSS 3.1
7.5بالا

شرح رسمی (انگلیسی)

A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted file that contains portable executable content compressed with FSG to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.5بالا 3.1 CVEProject cvelistV5 (CNA) (cisco) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Cisco Cisco Secure Endpoint 1.10.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.10.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.10.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.11.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.11.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.13.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.13.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.13.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.14.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.14.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.16.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.16.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.16.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.16.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.17.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.17.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.17.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.18.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.18.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.19.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.8 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.21.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.21.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.21.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.21.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.22.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.22.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.22.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.22.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.22.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.23.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.23.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.25.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.25.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.25.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.26.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.26.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.27.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.27.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.27.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.6.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.7.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.8.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.8.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.8.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.9.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.9.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.0.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.0.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.1.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.1.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.1.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.2.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.2.19 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.2.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.2.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.2.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.3.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.3.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.3.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.3.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.0.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.1.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.1.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.2.11 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.2.13 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.2.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.2.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.2.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.13 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.15 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.1.20425 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.1.20439 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.3.20679 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.1.20813 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.1.20833 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.11 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.13.21586 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.13.21598 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.15.21611 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.17.21680 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.19 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.20 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.21.21732 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.0.1.21160 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.0.1.21164 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.3.21242 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.5.21322 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.7.21417 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.7.21512 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.7.21585 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.2.1.21612 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.2.1.21650 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.2.3.30119 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.2.4.30130 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.1.30298 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.1.30307 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.2.30317 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.4.30419 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.4.30467 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.5.30483 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۴/۱۰
آخرین به‌روزرسانی
۱۴۰۵/۰۴/۱۰
وضعیت
منتشرشده
صادرکننده (CNA)
cisco

پیش‌بینی بهره‌برداری (EPSS)

۰٫۵۷٪
احتمال بهره‌برداری در ۳۰ روز
۴۷٫۵٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
ندارد
اثر فنی
جزئی

ضعف‌ها (CWE)

  • CWE-120
    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')