CVE-2018-20873: Input Validation
Published Aug 1, 2019
·Updated
cPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).
Affected Software
2 affected components
Cpanel Cpanel>=69.9999.122<70.0.57
Cpanel Cpanel>=73.9980.0<74.0.8
Event History
Aug 1, 2019
CVE Published
via MITRE·12:38 PM
Data Sourced
via MITRE·12:38 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20873?
CVE-2018-20873 has a medium severity rating as it allows local users to disable the ClamAV daemon.
2
How do I fix CVE-2018-20873?
To fix CVE-2018-20873, upgrade to cPanel version 74.0.8 or later.
3
Who is affected by CVE-2018-20873?
CVE-2018-20873 affects cPanel versions prior to 74.0.8 and versions between 69.9999.122 and 70.0.57.
4
What does CVE-2018-20873 exploit?
CVE-2018-20873 exploits a vulnerability that allows local users to disable the ClamAV malware scanner.
5
Is there a workaround for CVE-2018-20873?
There is no documented workaround for CVE-2018-20873; the recommended action is to upgrade to a patched version.