Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcritical

Cisco warns of a ClamAV bug with PoC exploit

Security Affairsby @securityaffairs ()2 min read3 · 1 read
Read at securityaffairs.com
Analyze CVE-2025-20128 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2025-20128CVE-2023-20032
Tags
cve-2025-20128cve-2023-20032exploit

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-20032
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed
9.829%
CVE-2025-20128
A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of…
7.52%

From the original article

2 min read at securityaffairs.com

Cisco addressed a ClamAV denial-of-service (DoS) vulnerability, and experts warn of the availability of a proof-of-concept (PoC) exploit code. Cisco has released security updates to address a ClamAV denial-of-service (DoS) vulnerability tracked as CVE-2025-20128. The Cisco PSIRT experts warn of the availability of a proof-of-concept (PoC) exploit code for this flaw.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.