Cisco ClamAV Denial of Service Vulnerability
Release Date:
23 Jan 2025
2054
Views
RISK: High Risk
TYPE: Security software and application - Security Software & Appliance
A vulnerability was identified in Cisco ClamAV. A remote attacker could exploit this vulnerability to trigger denial of service condition on the targeted system.
Note:
Proof Of Concept Exploit Code Is Publicly Available for CVE-2025-20128. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software.
Impact
- Denial of Service
System / Technologies affected
- Cisco Secure Endpoint Connector for Linux versions prior to 1.25.1
- Cisco Secure Endpoint Connector for Mac versions prior to 1.24.4
- Cisco Secure Endpoint Connector for Windows versions prior to 7.5.20
- Cisco Secure Endpoint Connector for Windows versions prior to 8.4.3
- Cisco Secure Endpoint Private Cloud versions prior to 4.2.0
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
Source
Related Link
Related Tags
Share with