CVE-2021-27506

—

CVSS 3.1

5.5 medium

EPSS

1%p69

Published

Mar 19, 2021 (Mar 19, 2021)

Modified

Jun 17, 2026

Description

The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19, 3.11.7 and 4.2.1.

Vendors: netasq project stormshield clamav
Products: netasq, stormshield network security, clamav
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.