CVE-2021-1404 Clam AntiVirus (ClamAV) Email Parser Denial of Service Vulnerability
A remote attacker can cause a denial of service in ClamAV by sending a crafted PDF file that triggers a heap buffer over-read.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-1404?
CVE-2021-1404 is a high-severity memory corruption vulnerability in Clamav Clamav, published on 8 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a heap buffer over-read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition.
Which versions are affected by CVE-2021-1404?
It affects 1 product.
Products include Clamav Clamav.
How do I fix CVE-2021-1404?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2021-1404 being exploited?
There is no known exploitation of CVE-2021-1404 in the wild and no public exploit code.
Other vulnerabilities in Clamav Clamav
Sources
Also known as ALPINE-CVE-2021-1404, CLEANSTART-2026-GW53162, DEBIAN-CVE-2021-1404, GHSA-95rx-jp6p-3cmx, UBUNTU-CVE-2021-1404.