Sourcefire الثغرات

التسلسل الزمني

النوع

منتج

SourceFire ClamAV52
Sourcefire Defense Center2
SourceFire FireSIGHT Management Center2
SourceFire Snort2

معالجة

Official Fix44
Temporary Fix0
Workaround0
Unavailable0
Not Defined14

قابلية الاستغلال

High0
Functional0
Proof-of-Concept18
Unproven0
Not Defined40

متجه الوصول

Not Defined0
Physical0
Local0
Adjacent0
Network58

توثيق

Not Defined0
High0
Low2
None56

تفاعل المستخدم

Not Defined0
Required0
None58

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤618
≤70
≤822
≤92
≤1016

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤56
≤612
≤712
≤812
≤92
≤1014

VulDB

≤10
≤20
≤30
≤40
≤50
≤618
≤70
≤822
≤92
≤1016

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k18
<2k2
<5k38
<10k0
<25k0
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k58
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (6): 3d9900 (1), ClamAV (51), Defense Center (1), FireSIGHT Management Center (1), Intrusion Sensor (1), Snort (2)

Link to Vendor Website: https://www.cisco.com/c/en/us/services/acquisitions/sourcefire.html

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
18/11/20157.37.3SourceFire FireSIGHT Management Center X.509 Certificate Chain Validation support.sourcefire.com تجاوز الصلاحياتغير معروفNot DefinedNot Defined0.004370.00CVE-2015-6357
23/04/201310.09.5SourceFire ClamAV pdf.c cli_scanpe تلف الذاكرةAnti-Malware SoftwareNot DefinedOfficial Fix0.071820.00CVE-2013-2021
23/04/201310.09.5SourceFire ClamAV pe.c cli_scanpe Remote Code ExecutionAnti-Malware SoftwareNot DefinedOfficial Fix0.138630.00CVE-2013-2020
23/04/20135.35.1SourceFire ClamAV sis.c الحرمان من الخدمةAnti-Malware SoftwareNot DefinedOfficial Fix0.138630.00CVE-2013-2020
15/03/201310.09.5SourceFire ClamAV RAR File unrar_iface.c unrar_extract_next_prepare تلف الذاكرةAnti-Malware SoftwareNot DefinedOfficial Fix0.000000.00
15/03/201310.09.5SourceFire ClamAV WWPack File wwunpack.c wwunpack تلف الذاكرةAnti-Malware SoftwareNot DefinedOfficial Fix0.000000.00
11/02/201310.09.5SourceFire ClamAV pe.c تلف الذاكرةAnti-Malware SoftwareNot DefinedOfficial Fix0.000000.00
11/02/20137.57.2SourceFire ClamAV getsisstring تلف الذاكرةAnti-Malware SoftwareNot DefinedOfficial Fix0.000000.00
11/02/20137.57.2SourceFire ClamAV libclamav decrypt_any الحرمان من الخدمةAnti-Malware SoftwareNot DefinedOfficial Fix0.000000.00
11/02/20137.57.2SourceFire ClamAV libclamav pdf_getdict الحرمان من الخدمةAnti-Malware SoftwareNot DefinedOfficial Fix0.000000.00

47 بعض الادخالات لم يتم عرضها

Interested in the pricing of exploits?

See the underground prices here!