Strix
26.1K

CVE-2016-1405

UnknownEPSS 2.96%

Last modified

CVE-2016-1405 is a vulnerability of currently unknown severity. libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service (AMP process restart) via a crafted document, aka Bug IDs CSCuv78533 and CSCuw60503.. EPSS estimates a 2.96% chance of exploitation in the next 30 days.

Description

libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service (AMP process restart) via a crafted document, aka Bug IDs CSCuv78533 and CSCuw60503.

Metrics

EPSS Probability
2.96%

85.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
ClamavClamavAll versions
CiscoEmail Security Appliance9.6.0-042
CiscoWeb Security Appliance8.8.0-085
CiscoWeb Security Appliance9.1.0-070
CiscoWeb Security Appliance9.5.0-284

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2016-1405?
libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service (AMP process restart) via a crafted document, aka Bug IDs CSCuv78533 and CSCuw60503.
How severe is CVE-2016-1405?
Severity scoring for CVE-2016-1405 is pending analysis. The EPSS model estimates a 2.96% probability of exploitation in the next 30 days.
How do I fix CVE-2016-1405?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2016

View all 2016CVEs →

Are you affected by CVE-2016-1405?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST