CVE-2021-1405 - log back

CVE-2021-1405 edited at 08 Apr 2021 10:30:49
References
https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html
+ https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29454
+ https://github.com/Cisco-Talos/clamav-devel/commit/b2337b87634f0cc41f4b789150ba1c6d2f22a51c
CVE-2021-1405 edited at 08 Apr 2021 10:24:09
Severity
- Unknown
+ Low
Remote
- Unknown
+ Remote
Type
- Unknown
+ Denial of service
Description
+ A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a heap buffer over-read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
References
+ https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html
Notes
CVE-2021-1405 created at 08 Apr 2021 10:21:13