$ cve CVE-2017-12379 JSON

CVE-2017-12379

9.8

CRITICAL · CVSS 3.0 · EPSS 12.5% (pctl 96)

Patch early

EPSS 12.5% — above the 10% action threshold.

Description

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in the message parsing function on an affected system. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted email to the affected device. This action could cause a messageAddArgument (in message.c) buffer overflow condition when ClamAV scans the malicious email, allowing the attacker to potentially cause a DoS condition or execute arbitrary code on an affected device.

Scoring

CVSS	9.8 (CRITICAL, v3.0)
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	12.55% — more likely to be exploited than 96% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	none known
Published	2018-01-26
Last modified	2026-06-17

Affected (2)

Vendor	Product
clamav	clamav
debian	debian linux

References

→ the Explorer · watch your stack · NVD