Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Debian LTS: DLA-2215-1 Critical: clamav Denial Of Service Issues

debian lts
Calendar Grey May 20, 2020
Dist Debian Esm H88
Upgrade ClamAV on your Debian LTS system to enhance security against CVE-2020-3327 and CVE-2020-3341 vulnerabilities by executing the update commands.
The following CVE(s) were found in src:clamav package
Topics%20covered

Topics Covered

security advisory denial of service buffer overflow debian clamav

Summary

CVE-2020-3327

A vulnerability in the ARJ archive parsing module in Clam
AntiVirus (ClamAV) could allow an unauthenticated, remote
attacker to cause a denial of service condition on an affected
device. The vulnerability is due to a heap buffer overflow read.
An attacker could exploit this vulnerability by sending a crafted
ARJ file to an affected device. An exploit could allow the
attacker to cause the ClamAV scanning process crash, resulting
in a denial of service condition.

CVE-2020-3341

A vulnerability in the PDF archive parsing module in Clam
AntiVirus (ClamAV) could allow an unauthenticated, remote
attacker to cause a denial of service condition on an affected
device. The vulnerability is due to a stack buffer overflow read.
An attacker could exploit this vulnerability by sending a crafted
PDF file to an affected device. An exploit could allow the
attacker to cause the ClamAV scanning process crash, resulting

Read the Full Advisory


Severity
critical
Lowest
Low
Medium
High
Critical

Package: clamav
Version: 0.101.5+dfsg-0+deb8u2
CVE ID: CVE-2020-3327 CVE-2020-3341

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow debian clamav

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here