CVE-2016-1405 Denial of service in n/a

What is CVE-2016-1405?

CVE-2016-1405 is a high-severity denial of service vulnerability in Cisco Email Security Appliance, published on 8 Jun 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service (AMP process restart) via a crafted document, aka Bug IDs CSCuv78533 and CSCuw60503.

Weakness: CWE-119

Which versions are affected by CVE-2016-1405?

It affects 3 products.

Products include Cisco Email Security Appliance, Cisco Web Security Appliance, Clamav Clamav.

How do I fix CVE-2016-1405?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2016-1405 being exploited?

There is no known exploitation of CVE-2016-1405 in the wild and no public exploit code.

Other vulnerabilities in Cisco Email Security Appliance

• CVE-2022-20798 Cisco Email Security Appliance and Cisco Secure Email and Web Manager External Authentication Bypass Vulnerability Critical 9.8
• CVE-2015-6291 Denial of service in n/a High 7.8
• CVE-2022-20664 Cisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure Vulnerability High 7.7
• CVE-2022-20960 Denial of service in Cisco Secure Email High 7.5
• CVE-2018-0419 Security feature bypass in Email Security Appliance (ESA) High 7.5

All Cisco Email Security Appliance vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2016-1405, GHSA-p4qj-763m-ffg3, MINI-h8vx-745j-7rv6, MINI-pprg-74vp-cpc6, UBUNTU-CVE-2016-1405.