[CIVN-2024-0033] Denial of Service Vulnerability in Cisco
Denial of Service Vulnerability in Cisco
Indian – Computer Emergency Response Team (cert-in.org.in)
Severity Rating: CRITICAL
Component Affected
Secure Endpoint Connector for Windows
Secure Endpoint Private Cloud
Overview
A Vulnerability has been reported in OLE2 file format parser of ClamAV which could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
Description
This Vulnerability exists in OLE2 file format parser of ClamAV due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device.
Successful exploitation of this vulnerability could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Solution
Apply appropriate updates as mentioned in:
Vendor Information
CISCO
References
CISCO
CVE Name
CVE-2024-20290
– —
Refference –
CERT-In
