cisco-sa-clamav-xxe-TcSZduhN: ClamAV DMG File Parsing XML Entity Expansion Vulnerability Affecting Cisco Products: February 2023
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed:A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-clamav-xxe-TcSZduhN?
The vulnerability cisco-sa-clamav-xxe-TcSZduhN has been assigned a high severity rating due to its potential for remote exploitation.
How do I fix cisco-sa-clamav-xxe-TcSZduhN?
To mitigate cisco-sa-clamav-xxe-TcSZduhN, update ClamAV to the latest version that addresses this vulnerability.
What versions are affected by cisco-sa-clamav-xxe-TcSZduhN?
ClamAV versions 1.0.0, 0.105.1, and 0.103.7 are affected by the cisco-sa-clamav-xxe-TcSZduhN vulnerability.
Can cisco-sa-clamav-xxe-TcSZduhN be exploited remotely?
Yes, the cisco-sa-clamav-xxe-TcSZduhN vulnerability can be exploited by an unauthenticated, remote attacker.
What type of vulnerability is cisco-sa-clamav-xxe-TcSZduhN?
The cisco-sa-clamav-xxe-TcSZduhN vulnerability is an XML External Entity (XXE) issue found in the DMG file parser of ClamAV.