Severity
7.5HIGH
EPSS
8.6%
top 7.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 7
Latest updateFeb 14

Description

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker t

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages7 packages

Debianclamav< 1.0.5+dfsg-1~deb12u1+2
Ubuntuclamav< 1.0.5+dfsg-0ubuntu0.23.10.1
NVDcisco/secure_endpoint8.0.1.211608.2.3.30119+1
CVEListV5cisco/cisco_secure_endpoint33 versions+32

Also affects: Fedora 38, 39

🔴Vulnerability Details

4
OSV
clamav vulnerabilities2024-02-14
OSV
CVE-2024-20290: A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition2024-02-07
CVEList
CVE-2024-20290: A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition2024-02-07
GHSA
GHSA-xcpx-h22f-m42v: A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition2024-02-07

📋Vendor Advisories

3
Ubuntu
ClamAV vulnerabilities2024-02-14
Cisco
ClamAV OLE2 File Format Parsing Denial of Service Vulnerability2024-02-07
Debian
CVE-2024-20290: clamav - A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthen...2024
CVE-2024-20290 (HIGH CVSS 7.5) | A vulnerability in the OLE2 file fo | cvebase.io