HFS+ parser Denial of Service in ClamAV
CVE-2023-20197 Published on August 16, 2023

A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .

NVD

Vulnerability Analysis

CVE-2023-20197 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
HIGH

Weakness Type

What is an Infinite Loop Vulnerability?

The program contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop. If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory.

CVE-2023-20197 has been classified to as an Infinite Loop vulnerability or weakness.


Products Associated with CVE-2023-20197

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-20197 are published in these products:

Cisco Secure Endpoint Private Cloud
 
Cisco Secure Endpoint
 
Fedora Project Fedora
 
Clamav
 

Affected Versions

Cisco Secure Endpoint: Cisco Secure Endpoint Private Cloud Console:

Exploit Probability

EPSS
0.44%
Percentile
62.72%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.