CVE-2021-27506: Medium severity netasq vulnerability

Q: What is CVE-2021-27506 vulnerability?

CVE-2021-27506 refers to a vulnerability in the ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) that can be exploited to cause a Denial of Service (DoS) when parsing malformed PNG files.

Q: How can CVE-2021-27506 be fixed?

CVE-2021-27506 can be fixed by upgrading to SNS versions 3.7.19, 3.11.7, or 4.2.1.

Q: What is the severity of CVE-2021-27506?

CVE-2021-27506 has a severity rating of medium with a CVSS score of 5.5.

Q: Where can I find more information about CVE-2021-27506?

More information about CVE-2021-27506 can be found at the following references: [1] [2].

Published Mar 19, 2021

Updated

The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19, 3.11.7 and 4.2.1.

Affected Software

4 affected components

Netasq Project Netasq>=9.1.0<=9.1.11

Stormshield Network Security>=1.0<=4.2.0

clamav clamav<=0.103.1

Stormshield Stormshield Network Security>=1.0<=4.2.0

Event History

Mar 19, 2021

CVE Published

via MITRE·02:28 PM

Data Sourced

via MITRE·02:28 PM

Description

Frequently Asked Questions

What is CVE-2021-27506 vulnerability?

CVE-2021-27506 refers to a vulnerability in the ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) that can be exploited to cause a Denial of Service (DoS) when parsing malformed PNG files.

Which software versions are affected by CVE-2021-27506?

Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0 are affected by CVE-2021-27506.

How can CVE-2021-27506 be fixed?