CVE-2020-3327: ClamAV ARJ Archive Parsing Denial of Service Vulnerability
A vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a heap buffer overflow read. An attacker could exploit this vulnerability by sending a crafted ARJ file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3327?
CVE-2020-3327 is a vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2.
How does CVE-2020-3327 affect Clam AntiVirus (ClamAV)?
CVE-2020-3327 allows an unauthenticated, remote attacker to cause a denial of service condition on an affected device.
What is the severity of CVE-2020-3327?
CVE-2020-3327 has a severity rating of 7.5 (high).
How can I fix CVE-2020-3327?
To fix CVE-2020-3327, update ClamAV to version 0.103.6+dfsg-0+deb10u1 or a later version.
Where can I find more information about CVE-2020-3327?
You can find more information about CVE-2020-3327 on the MITRE CVE website and the ClamAV blog.