CVE-2021-27506
- Source
- https://cve.org/CVERecord?id=CVE-2021-27506
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-27506.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-27506
- Downstream
- Published
- 2021-03-19T15:15:12Z
- Modified
- 2026-07-08T05:56:59Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19, 3.11.7 and 4.2.1.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:netasq_project:netasq:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "9.1.0" }, { "last_affected": "9.1.11" } ], "source": "CPE_RANGE", "vendor_product": "netasq_project:netasq" }, { "cpes": [ "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "1.0" }, { "last_affected": "4.2.0" } ], "source": "CPE_RANGE", "vendor_product": "stormshield:stormshield_network_security" } ] }- References
Affected packages
Git / github.com/cisco-talos/clamav
Affected ranges
- Type
- GIT
- Repo
- https://github.com/cisco-talos/clamav
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast Affected
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "0" }, { "last_affected": "0.103.1" } ], "source": "CPE_RANGE" }