ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2026-20338

Cisco Secure Endpoint

ClamAV ZIP File Format Processing Memory Corruption Vulnerability

CVSS 3.1
7.5بالا

شرح رسمی (انگلیسی)

A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper memory handling when processing content in zip files during scanning. An attacker could exploit this vulnerability by submitting a crafted zip file for scanning. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate as a result of a memory double-free, resulting in a DoS condition on the affected software.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.5بالا 3.1 CVEProject cvelistV5 (CNA) (cisco) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Cisco Cisco Secure Endpoint 1.10.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.10.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.10.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.11.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.11.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.12.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.13.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.13.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.13.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.14.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.14.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.15.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.16.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.16.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.16.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.16.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.17.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.17.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.17.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.18.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.18.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.19.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.20.8 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.21.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.21.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.21.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.21.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.22.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.22.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.22.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.22.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.22.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.23.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.23.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.24.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.25.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.25.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.25.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.26.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.26.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.27.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.27.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.27.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.6.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.7.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.8.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.8.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.8.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.9.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 1.9.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.0.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.0.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.1.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.1.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.1.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.2.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.2.19 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.2.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.2.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.2.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.3.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.3.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.3.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 6.3.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.0.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.1.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.1.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.2.11 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.2.13 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.2.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.2.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.2.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.13 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.15 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.3.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.1.20425 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.1.20439 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.3.20679 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.4.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.1.20813 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.1.20833 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.11 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.13.21586 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.13.21598 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.15.21611 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.17.21680 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.19 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.20 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.21.21732 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 7.5.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.0.1.21160 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.0.1.21164 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.3.21242 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.5.21322 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.7.21417 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.7.21512 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.1.7.21585 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.2.1.21612 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.2.1.21650 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.2.3.30119 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.2.4.30130 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.1.30298 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.1.30307 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.2.30317 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.4.30419 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.4.30467 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Endpoint 8.4.5.30483 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۵/۱۶
آخرین به‌روزرسانی
۱۴۰۵/۰۵/۱۶
وضعیت
منتشرشده
صادرکننده (CNA)
cisco

پیش‌بینی بهره‌برداری (EPSS)

۰٫۵۵٪
احتمال بهره‌برداری در ۳۰ روز
۴۶٫۶٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
ندارد
اثر فنی
جزئی

ضعف‌ها (CWE)

  • CWE-415
    Double Free