CVE detail
CVE-2011-2721 — CVE-2011-2721
Published 2011-08-05 · Modified 2026-06-16 · Vendor clamav · Product clamav · Source nvd
UNKNOWN
severity
CVSS-derived band
0.0338
EPSS probability
exploitation probability, 30d
88.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog
Description
Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References