CVE-2021-1252
Description
A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper error handling that may result in an infinite loop. An attacker could exploit this vulnerability by sending a crafted Excel file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process hang, resulting in a denial of service condition.
Risk Information
Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.539
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2021-1252,CVE-2021-1404 are affected in Clamav 0.103.0 | Windows |
| Vulnerabilities CVE-2021-1252,CVE-2021-1404,CVE-2021-1405,CVE-2021-27506 are affected in Clamav 0.103.1 | Windows |
| SUSE-SU-2021:1174-1(SUSE Linux Enterprise Server 12-SP5 ) clamav-0.103.2-3.6.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1174-1(SUSE Linux Enterprise Server 12-SP5 ) clamav-debuginfo-0.103.2-3.6.1.x86_64.rpm | Linux |
| SUSE-SU-2021:1174-1(SUSE Linux Enterprise Server 12-SP5 ) clamav-debugsource-0.103.2-3.6.1.x86_64.rpm | Linux |
| Anti-virus utility for Unix (USN-4918-1) clamav_0.103.2+dfsg-0ubuntu0.16.04.1_i386.deb | Linux |
| Anti-virus utility for Unix (USN-4918-1) clamav_0.103.2+dfsg-0ubuntu0.16.04.1_amd64.deb | Linux |
| Anti-virus utility for Unix (USN-4918-1) clamav_0.103.2+dfsg-0ubuntu0.18.04.1_i386.deb | Linux |
| Anti-virus utility for Unix (USN-4918-1) clamav_0.103.2+dfsg-0ubuntu0.18.04.1_amd64.deb | Linux |
| Anti-virus utility for Unix (USN-4918-1) clamav_0.103.2+dfsg-0ubuntu0.20.04.1_amd64.deb | Linux |
| Anti-virus utility for Unix (USN-4918-1) clamav_0.103.2+dfsg-0ubuntu0.20.10.1_amd64.deb | Linux |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-341177 | ClamAV (0.103.12) |
| PATCH-341177 | ClamAV (0.103.12) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234