CVE-2020-3481
Severity
7.5HIGH
EPSS
3.0%
top 13.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 20
Latest updateMay 24
Description
A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a null pointer dereference. An attacker could exploit this vulnerability by sending a crafted EGG file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages3 packages
Also affects: Debian Linux 9.0, Fedora 31, 32, Ubuntu Linux 12.04, 14.04, 16.04, 18.04, 20.04
🔴Vulnerability Details
5📋Vendor Advisories
3💬Community
3Bugzilla▶
CVE-2020-3481 clamav: improper error handling causing crash due to NULL pointer dereference [fedora-all]↗2020-07-17
Bugzilla▶
CVE-2020-3481 clamav: improper error handling causing crash due to NULL pointer dereference↗2020-07-17
Bugzilla▶
CVE-2020-3481 clamav: improper error handling causing crash due to NULL pointer dereference [epel-all]↗2020-07-17