← volver
CVE-2020-3327

ClamAV ARJ Archive Parsing Denial of Service Vulnerability

CVSS 7.5 HIGHEPSS 5.1%CWE-20
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.5EPSS 5.1%KEV nãoPoC Nuclei Metasploit Patch referenciado
Ciclo de vida
13 may 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a heap buffer overflow read. An attacker could exploit this vulnerability by sending a crafted ARJ file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
Cisco · ClamAV

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →