Lucene search

K
cvelistCiscoCVELIST:CVE-2020-3327
HistoryMay 12, 2020 - 12:00 a.m.

CVE-2020-3327 ClamAV ARJ Archive Parsing Denial of Service Vulnerability

2020-05-1200:00:00
CWE-20
cisco
raw.githubusercontent.com
2

7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.5%

A vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a heap buffer overflow read. An attacker could exploit this vulnerability by sending a crafted ARJ file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.

7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.5%