CVE-2023-20197

HIGH

7.5

CVSS Score

Published: August 16, 2023 at 09:43 PM UTC

Updated: June 17, 2026 at 05:29 AM UTC

3 products affected across 2 vendorsFedoraSecure EndpointSecure Endpoint Private Cloud

Using Cisco Secure Endpoint by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Secure Endpoint - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 1%

Description

A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Secure Endpoint · Cisco

95%

v < 1.22.0v < 7.5.13.215868.0.1.21160 ≤ v < 8.1.7.215851.10.0 1.10.1 1.10.2 1.11.0 1.12.0 1.12.1 1.12.2 1.12.3 1.12.4 1.12.5 1.12.6 1.12.7 1.13.0 1.13.1 1.13.2 1.14.0 1.6.0 1.7.0 1.8.0 1.8.1 1.8.4 1.9.0 1.9.1 6.0.7 6.0.9 6.1.5 6.1.7 6.1.9 6.2.1 6.2.19 6.2.5 6.2.9 6.3.1 6.3.3 6.3.5 6.3.7 7.0.5 7.1.1 7.1.5 7.2.11 7.2.13 7.2.3 7.2.5 7.2.7 7.3.3 7.3.5 8.1.5

Affected range stops below 1.22.0, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.5.13.21586, so it looks safe — our inference, not a vendor statement

Affected range stops below 8.1.7.21585, so it looks safe — our inference, not a vendor statement

Secure Endpoint Private Cloud · Cisco

95%

v < 3.8.0

Affected range stops below 3.8.0, so it looks safe — our inference, not a vendor statement

Fedora · Fedora Projectrpm

95%

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-rNwNEEee

References (1)

Vendor Advisory

Source: [email protected]

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-rNwNEEee

CVSS

7.5HIGHcisco

Attack Vector: NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: NONE
Integrity: NONE
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-835

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card