CVE-2013-6497: clamav DEPRECATED: Code

CVSS: 2.1v2.0LowModified

AliasesUBUNTU-CVE-2013-6497DEBIAN-CVE-2013-6497

Published 01-12-2014Last modified 06-08-2024

Vulnerability summary

CVE-2013-6497 is a low (CVSS 2.1) DEPRECATED: Code vulnerability in clamav. EPSS estimates a 1.13% chance of exploitation in the next 30 days, higher than 65.9% of scored vulnerabilities.

Overall risk

9/100

0100

Minimal · default modelHow is this calculated?

CVSS score

2.1/10

010

Low · v2.0 (NVD)

EPSS score

1.13%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 3 · Related 2

DLA-95-1 OPENSUSE-SU-2024:10571-1 USN-2423-1

Timeline

01-12-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.

CVSS metrics

1 score · 1 source · 1 version

v2.02.1

EPSS trend

Probability

1.13%

Chance of exploitation in the next 30 days

Percentile

66%

Versus all other CVEs

30-day change

0.00 pp

From 1.13% on 19-09-2026

19-09-202619-10-2026

EPSS score

1.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-17DEPRECATED: CodeThis entry has been deprecated. It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.

Affected systems

Clamav1 product

clamav≤ 0.98.4

Debian1 product

clamav< 0.98.5+dfsg-1

Ubuntu1 product

clamav< 0.98.5+addedllvm-0ubuntu0.14.04.1

3 vendors · 3 products

References

22 links

lists.opensuse.org/opensuse-security-announce/2014-12/msg00003.htmlVendor AdvisoryX Refsource SUSE
www.openwall.com/lists/oss-security/2014/11/19/2Mailing ListX Refsource MLIST
lists.fedoraproject.org/pipermail/package-announce/2014-November/144754.htmlVendor AdvisoryX Refsource FEDORA
lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.htmlVendor AdvisoryX Refsource SUSE
lists.fedoraproject.org/pipermail/package-announce/2014-November/144979.htmlVendor AdvisoryX Refsource FEDORA
www.openwall.com/lists/oss-security/2014/11/19/5Mailing ListX Refsource MLIST
blog.clamav.net/2014/11/clamav-0985-has-been-released.htmlX Refsource CONFIRMPatchVendor Advisory
www.securityfocus.com/bid/71178VDB EntryX Refsource BID
www.mandriva.com/security/advisories?name=MDVSA-2014:217Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/59645Third Party AdvisoryX Refsource SECUNIA

Show all 22 references

secunia.com/advisories/60150Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/USN-2423-1Vendor AdvisoryX Refsource UBUNTU
bugzilla.clamav.net/show_bug.cgi?id=11088X Refsource CONFIRMVendor Advisory
www.ubuntu.com/usn/USN-2488-2Vendor AdvisoryX Refsource UBUNTU
bugzilla.redhat.com/show_bug.cgi?id=1138101X Refsource CONFIRM
exchange.xforce.ibmcloud.com/vulnerabilities/98804VDB EntryX Refsource XF
lists.opensuse.org/opensuse-security-announce/2014-12/msg00007.htmlVendor AdvisoryX Refsource SUSE
ubuntu.com/security/CVE-2013-6497REPORT
ubuntu.com/security/notices/USN-2423-1Advisory
www.cve.org/CVERecord?id=CVE-2013-6497REPORT
ubuntu.com/security/notices/USN-2488-2Advisory
security-tracker.debian.org/tracker/CVE-2013-6497Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities