CVE-2020-3481

2020-07-2018:15:00

Alpine Linux Development Team

security.alpinelinux.org

0.022 Low

EPSS

Percentile

89.3%

JSON

A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a null pointer dereference. An attacker could exploit this vulnerability by sending a crafted EGG file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchclamav< 0.102.4-r0UNKNOWN
Alpine3.11-mainnoarchclamav< 0.102.4-r0UNKNOWN
Alpine3.12-mainnoarchclamav< 0.102.4-r0UNKNOWN
Alpine3.13-mainnoarchclamav< 0.102.4-r0UNKNOWN
Alpine3.14-communitynoarchclamav< 0.102.4-r0UNKNOWN
Alpine3.15-communitynoarchclamav< 0.102.4-r0UNKNOWN
Alpine3.16-communitynoarchclamav< 0.102.4-r0UNKNOWN
Alpine3.17-communitynoarchclamav< 0.102.4-r0UNKNOWN
Alpine3.18-communitynoarchclamav< 0.102.4-r0UNKNOWN
Alpine3.19-communitynoarchclamav< 0.102.4-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	clamav	< 0.102.4-r0	UNKNOWN
Alpine	3.11-main	noarch	clamav	< 0.102.4-r0	UNKNOWN
Alpine	3.12-main	noarch	clamav	< 0.102.4-r0	UNKNOWN
Alpine	3.13-main	noarch	clamav	< 0.102.4-r0	UNKNOWN
Alpine	3.14-community	noarch	clamav	< 0.102.4-r0	UNKNOWN
Alpine	3.15-community	noarch	clamav	< 0.102.4-r0	UNKNOWN
Alpine	3.16-community	noarch	clamav	< 0.102.4-r0	UNKNOWN
Alpine	3.17-community	noarch	clamav	< 0.102.4-r0	UNKNOWN
Alpine	3.18-community	noarch	clamav	< 0.102.4-r0	UNKNOWN
Alpine	3.19-community	noarch	clamav	< 0.102.4-r0	UNKNOWN