Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2020-3123
HistoryFeb 05, 2020 - 12:00 a.m.

CVE-2020-3123

2020-02-0500:00:00
ubuntu.com
ubuntu.com
15

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.011 Low

EPSS

Percentile

84.4%

JSON

A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus
(ClamAV) Software versions 0.102.1 and 0.102.0 could allow an
unauthenticated, remote attacker to cause a denial of service condition on
an affected device. The vulnerability is due to an out-of-bounds read
affecting users that have enabled the optional DLP feature. An attacker
could exploit this vulnerability by sending a crafted email file to an
affected device. An exploit could allow the attacker to cause the ClamAV
scanning process crash, resulting in a denial of service condition.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchclamav< 0.102.2+dfsg-0ubuntu0.18.04.1UNKNOWN
ubuntu19.10noarchclamav< 0.102.2+dfsg-0ubuntu0.19.10.1UNKNOWN
ubuntu14.04noarchclamav< 0.102.2+dfsg-0ubuntu0.14.04.1+esm1UNKNOWN
ubuntu16.04noarchclamav< 0.102.2+dfsg-0ubuntu0.16.04.1UNKNOWN

Related

openvas 7
alpinelinux 1
cvelist 1
ubuntu 2
freebsd 1
nessus 9
cve 1
debiancve 1
prion 1
nvd 1
osv 1
mageia 1
gentoo 1
suse 2
openvas
openvas
Ubuntu: Security Advisory (USN-4280-1)
2020-02-19 00:00:00
Mageia: Security Advisory (MGASA-2020-0105)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-4280-2)
2022-08-26 00:00:00
alpinelinux
alpinelinux
CVE-2020-3123
2020-02-05 18:15:11
cvelist
cvelist
CVE-2020-3123
2020-02-05 00:00:00
ubuntu
ubuntu
ClamAV vulnerability
2020-02-18 00:00:00
ClamAV vulnerability
2020-02-18 00:00:00
freebsd
freebsd
clamav -- Denial-of-Service (DoS) vulnerability
2020-02-05 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : ClamAV vulnerability (USN-4280-1)
2020-02-19 00:00:00
FreeBSD : clamav -- Denial-of-Service (DoS) vulnerability (e7bc2b99-485a-11ea-bff9-9c5c8e75236a)
2020-02-07 00:00:00
GLSA-202003-46 : ClamAV: Multiple vulnerabilities
2020-03-20 00:00:00
cve
cve
CVE-2020-3123
2020-02-05 18:15:11
debiancve
debiancve
CVE-2020-3123
2020-02-05 18:15:11
prion
prion
Design/Logic Flaw
2020-02-05 18:15:00
nvd
nvd
CVE-2020-3123
2020-02-05 18:15:11
osv
osv
CVE-2020-3123
2020-02-05 18:15:11
mageia
mageia
Updated clamav packages fix security vulnerability
2020-02-26 13:21:01
gentoo
gentoo
ClamAV: Multiple vulnerabilities
2020-03-19 00:00:00
suse
suse
Security update for clamav (moderate)
2020-12-17 00:00:00
Security update for clamav (moderate)
2020-12-18 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.011 Low

EPSS

Percentile

84.4%

JSON
Related for UB:CVE-2020-3123
openvas7alpinelinux1cvelist1ubuntu2freebsd1nessus9cve1debiancve1prion1nvd1osv1mageia1gentoo1suse2