Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6636-1
HistoryFeb 14, 2024 - 12:00 a.m.

ClamAV vulnerabilities

2024-02-1400:00:00
ubuntu.com
20
clamav
vulnerabilities
ubuntu 23.10
ole2
parsing
clamd
service
cve-2024-20290
cve-2024-20328
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.3

Confidence

Low

EPSS

0.001

Percentile

35.9%

JSON

Releases

  • Ubuntu 23.10

Packages

  • clamav - Anti-virus utility for Unix

Details

It was discovered that ClamAV incorrectly handled parsing certain OLE2
files. A remote attacker could possibly use this issue to cause ClamAV to
crash, resulting in a denial of service. (CVE-2024-20290)

Amit Schendel discovered that the ClamAV ClamD service incorrectly handled
the VirusEvent feature. An attacker able to connect to ClamD could possibly
use this issue to execute arbitrary code. (CVE-2024-20328)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchclamav< 1.0.5+dfsg-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchclamav-base< 1.0.5+dfsg-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchclamav-daemon< 1.0.5+dfsg-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchclamav-daemon-dbgsym< 1.0.5+dfsg-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchclamav-dbgsym< 1.0.5+dfsg-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchclamav-docs< 1.0.5+dfsg-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchclamav-freshclam< 1.0.5+dfsg-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchclamav-freshclam-dbgsym< 1.0.5+dfsg-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchclamav-milter< 1.0.5+dfsg-0ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchclamav-milter-dbgsym< 1.0.5+dfsg-0ubuntu0.23.10.1UNKNOWN
Rows per page:
1-10 of 161

Related

mageia 1
nessus 8
osv 3
openvas 4
fedora 2
freebsd 1
cbl_mariner 2
veracode 2
ubuntucve 2
alpinelinux 2
nvd 2
cvelist 2
debiancve 2
cgr 2
cve 2
wolfi 2
prion 2
cisco 1
cnvd 1
vulnrichment 1
mageia
mageia
Updated clamav packages fix security vulnerabilities
2024-02-25 01:51:43
nessus
nessus
FreeBSD : clamav -- Multiple vulnerabilities (68ae70c5-c5e5-11ee-9768-08002784c58d)
2024-02-08 00:00:00
Ubuntu 23.10 : ClamAV vulnerabilities (USN-6636-1)
2024-02-15 00:00:00
Fedora 39 : clamav (2024-3439911df6)
2024-02-14 00:00:00
osv
osv
clamav vulnerabilities
2024-02-14 16:11:25
CGA-6rr3-qqj2-6wrg
2024-06-06 12:24:42
CGA-j22c-hpvc-9g38
2024-06-06 12:27:58
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0048)
2024-02-26 00:00:00
Fedora: Security Advisory for clamav (FEDORA-2024-c42cf0e576)
2024-02-13 00:00:00
Ubuntu: Security Advisory (USN-6636-1)
2024-02-15 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: clamav-1.0.5-1.fc39
2024-02-14 02:25:17
[SECURITY] Fedora 38 Update: clamav-1.0.5-1.fc38
2024-02-13 01:28:24
freebsd
freebsd
clamav -- Multiple vulnerabilities
2024-02-07 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-20328 affecting package clamav for versions less than 1.0.6-1
2024-05-17 21:38:35
CVE-2024-20328 affecting package clamav for versions less than 0.105.2-5
2024-03-07 00:42:26
veracode
veracode
Arbitrary Command Injection
2024-02-12 20:50:39
Denial Of Service
2024-02-12 19:55:25
ubuntucve
ubuntucve
CVE-2024-20290
2024-02-07 00:00:00
CVE-2024-20328
2024-02-09 00:00:00
alpinelinux
alpinelinux
CVE-2024-20290
2024-02-07 17:15:10
CVE-2024-20328
2024-03-01 21:15:07
nvd
nvd
CVE-2024-20290
2024-02-07 17:15:10
CVE-2024-20328
2024-03-01 21:15:07
cvelist
cvelist
CVE-2024-20290
2024-02-07 16:16:00
CVE-2024-20328 ClamAV VirusEvent File Processing Command Injection Vulnerability
2024-03-01 20:48:15
debiancve
debiancve
CVE-2024-20290
2024-02-07 17:15:10
CVE-2024-20328
2024-03-01 21:15:07
cgr
cgr
CVE-2024-20290 vulnerabilities
2024-05-19 03:07:16
CVE-2024-20328 vulnerabilities
2024-05-19 03:07:16
cve
cve
CVE-2024-20290
2024-02-07 17:15:10
CVE-2024-20328
2024-03-01 21:15:07
wolfi
wolfi
CVE-2024-20290 vulnerabilities
2024-09-28 03:12:03
CVE-2024-20328 vulnerabilities
2024-09-28 03:12:03
prion
prion
Heap overflow
2024-02-07 17:15:00
Design/Logic Flaw
2024-03-01 21:15:00
cisco
cisco
ClamAV OLE2 File Format Parsing Denial of Service Vulnerability
2024-02-07 16:00:00
cnvd
cnvd
ClamAV Command Execution Vulnerability
2024-03-06 00:00:00
vulnrichment
vulnrichment
CVE-2024-20328 ClamAV VirusEvent File Processing Command Injection Vulnerability
2024-03-01 20:48:15

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.3

Confidence

Low

EPSS

0.001

Percentile

35.9%

JSON
Related for USN-6636-1
mageia1nessus8osv3openvas4fedora2freebsd1cbl_mariner2veracode2ubuntucve2alpinelinux2nvd2cvelist2debiancve2cgr2cve2wolfi2prion2cisco1cnvd1vulnrichment1