CVE-2021-1404: cisco clamav Improper Input Validation
Vulnerability summary
CVE-2021-1404 is a high (CVSS 7.5) Improper Input Validation vulnerability in cisco clamav. EPSS estimates a 2.13% chance of exploitation in the next 30 days, higher than 81.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 8 · Related 9Timeline
- 08-04-2021PublishedVulnerability first disclosed.
- 08-11-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a heap buffer over-read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
CVSS metrics
6 scores · 5 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
2.13%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
0.00 pp
From 2.13% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.
Affected systems
Alpine1 product
- clamav< 0.103.2-r0
Cisco1 product
- clamavEOL0.103.0 | 0.103.1
Clamav1 product
- clamavEOL0.103.0 | 0.103.1
Debian1 product
- clamav< 0.103.2+dfsg-1
Ubuntu1 product
- clamav< 0.103.2+dfsg-0ubuntu0.14.04.1+esm1 | < 0.103.2+dfsg-0ubuntu0.16.04.1 | < 0.103.2+dfsg-0ubuntu0.18.04.1 | < 0.103.2+dfsg-0ubuntu0.20.04.1
5 vendors · 5 products
References
9 links- blog.clamav.net/2021/04/clamav-01032-security-patch-release.htmlVendor AdvisoryX Refsource CISCOREPORTRelease Notes
