A vulnerability in the filesystem image parser for Hierarchical File...

7.5 CVSS

Vulnerability Description

A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-20197

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-rNwNEEee

More from Cisco

View All →

CVE-2025-20393

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

Critical 10

CVE-2025-20377

Cisco Unified Intelligence Center API Information Disclosure Vulnerability

Medium 4.3

CVE-2025-20376

Cisco Unified Contact Center Express Remote Code Execution Vulnerability

Medium 6.5

CVE-2025-20375

Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability

Medium 6.5

CVE-2025-20374

Cisco Unified Contact Center Express Arbitrary File Download Vulnerability

Medium 4.9

Affected Vendor

Cisco

View all reports →

Affected Software

Cisco Secure Endpoint, Cisco Secure Endpoint Private Cloud Console

Vulnerable Versions:

6.0.9, 6.0.7, 6.1.5, 6.1.7, 6.1.9, 6.2.1, 6.2.5, 6.2.19, 6.2.9, 6.3.5, 6.3.1, 6.3.7, 6.3.3, 7.0.5, 7.1.1, 7.1.5, 1.12.1, 1.12.2, 1.12.5, 1.12.0, 1.12.6, 1.12.3, 1.12.7, 1.12.4, 1.13.0, 1.13.1, 1.13.2, 1.11.0, 1.10.2, 1.10.1, 1.10.0, 1.14.0, 1.6.0, 1.9.0, 1.9.1, 1.8.1, 1.8.0, 1.8.4, 1.7.0, 7.2.13, 7.2.7, 7.2.3, 7.2.11, 7.2.5, 7.3.3, 7.3.5, 8.1.5