CVE-2019-1785: Clam AntiVirus RAR Directory Traversal Vulnerability

Published Apr 8, 2019

Updated

A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper error-handling mechanisms when processing nested RAR files sent to an affected device. An attacker could exploit this vulnerability by sending a crafted RAR file to an affected device. An exploit could allow the attacker to view or create arbitrary files on the targeted system.

Affected Software

2 affected components

clamav clamav=0.101.0

clamav clamav=0.101.1

Event History

Apr 8, 2019

CVE Published

via MITRE·07:05 PM

Data Sourced

via MITRE·07:05 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2019-1785?

CVE-2019-1785 is a vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0.

What is the severity of CVE-2019-1785?

CVE-2019-1785 has a severity rating of 7.8, which is considered critical.

How can an attacker exploit CVE-2019-1785?

An unauthenticated, remote attacker can exploit CVE-2019-1785 to cause a denial of service condition on an affected device.

Is there a fix available for CVE-2019-1785?

Yes, there are fixes available for CVE-2019-1785. It is recommended to update to Clam AntiVirus (ClamAV) Software versions 0.101.2 or later to mitigate the vulnerability.

Where can I find more information about CVE-2019-1785?

You can find more information about CVE-2019-1785 on the ClamAV bugzilla and the Gentoo security advisory pages.