CVE-2013-2020: Medium severity ubuntu vulnerability
Published May 13, 2013
·Updated
Integer underflow in the cliscanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.
Affected Software
60 affected components
Canonical Ubuntu Linux=10.04
Canonical Ubuntu Linux=11.10
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
Canonical Ubuntu Linux=13.04
SUSE Linux Enterprise Server=11.0-sp1
SUSE Linux Enterprise Server=11.0-sp2
clamav clamav<=0.97.7
clamav clamav=0.9-rc1
clamav clamav=0.90
clamav clamav=0.90-rc1
clamav clamav=0.90-rc1.1
clamav clamav=0.90-rc2
clamav clamav=0.90-rc3
clamav clamav=0.90.1
clamav clamav=0.90.1_p0
clamav clamav=0.90.2
clamav clamav=0.90.2_p0
clamav clamav=0.90.3
clamav clamav=0.90.3_p0
clamav clamav=0.90.3_p1
clamav clamav=0.91
clamav clamav=0.91-rc1
clamav clamav=0.91-rc2
clamav clamav=0.91.1
clamav clamav=0.91.2
clamav clamav=0.91.2_p0
clamav clamav=0.92
clamav clamav=0.92.1
clamav clamav=0.92_p0
clamav clamav=0.93
clamav clamav=0.93.1
clamav clamav=0.93.2
clamav clamav=0.93.3
clamav clamav=0.94
clamav clamav=0.94.1
clamav clamav=0.94.2
clamav clamav=0.95
clamav clamav=0.95-rc1
clamav clamav=0.95-rc2
clamav clamav=0.95-src1
clamav clamav=0.95-src2
clamav clamav=0.95.1
clamav clamav=0.95.2
clamav clamav=0.95.3
clamav clamav=0.96
clamav clamav=0.96-rc1
clamav clamav=0.96-rc2
clamav clamav=0.96.1
clamav clamav=0.96.2
clamav clamav=0.96.3
clamav clamav=0.96.4
clamav clamav=0.96.5
clamav clamav=0.97
clamav clamav=0.97-rc
clamav clamav=0.97.1
clamav clamav=0.97.2
clamav clamav=0.97.3
clamav clamav=0.97.4
clamav clamav=0.97.5
Remediation
Event History
May 13, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2020?
CVE-2013-2020 has been classified as a high severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2013-2020?
To fix CVE-2013-2020, upgrade ClamAV to version 0.97.8 or later.
3
Which versions of ClamAV are affected by CVE-2013-2020?
CVE-2013-2020 affects ClamAV versions prior to 0.97.8.
4
Where can I find more information about CVE-2013-2020?
More information about CVE-2013-2020 can be found in the official release notes and security announcements related to ClamAV.
5
Does CVE-2013-2020 affect Ubuntu or SUSE systems?
Yes, CVE-2013-2020 affects specific versions of ClamAV that are available on Ubuntu and SUSE systems.