CVE-2020-3123: High severity clamav clamav vulnerability
A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to an out-of-bounds read affecting users that have enabled the optional DLP feature. An attacker could exploit this vulnerability by sending a crafted email file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/clamavto a version that resolves this vulnerability.Fixed in 0.103.10+dfsg-0+deb11u1Fixed in 1.4.3+dfsg-1~deb11u1Fixed in 1.4.3+dfsg-1~deb12u2Fixed in 1.4.3+dfsg-1Fixed in 1.4.5+dfsg-3 - Upgrade
Upgrade
Clam AntiVirus (ClamAV)to a version that resolves this vulnerability.Fixed in 0.102.1 - Upgrade
Upgrade
Clam AntiVirus (ClamAV)to a version that resolves this vulnerability.Fixed in 0.102.0 - Configuration
Disable the optional DLP feature to avoid the out-of-bounds read in the DLP module.
Clam AntiVirus (ClamAV) DLP module DLP feature (optional) = disabled
Event History
Frequently Asked Questions
What is CVE-2020-3123?
CVE-2020-3123 is a vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) software versions 0.102.1 and 0.102.0.
What is the severity of CVE-2020-3123?
CVE-2020-3123 has a severity rating of 7.5 (high).
How can an attacker exploit CVE-2020-3123?
An attacker can exploit CVE-2020-3123 by causing a denial of service condition on an affected device.
Which versions of ClamAV are affected by CVE-2020-3123?
ClamAV software versions 0.102.1 and 0.102.0 are affected by CVE-2020-3123.
How can I fix CVE-2020-3123?
To fix CVE-2020-3123, update your ClamAV software to version 0.103.6+dfsg-0+deb10u1 or later.