CVE-2020-3341: ClamAV PDF Parsing Denial of Service Vulnerability
A vulnerability in the PDF archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.101 - 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a stack buffer overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3341?
CVE-2020-3341 is a vulnerability in the PDF archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.101 - 0.102.2.
How severe is CVE-2020-3341?
CVE-2020-3341 has a severity rating of 7.5 (high).
How can an attacker exploit CVE-2020-3341?
An attacker can exploit CVE-2020-3341 by using a stack buffer overflow read to cause a denial of service condition on an affected device.
Which software versions are affected by CVE-2020-3341?
Clam AntiVirus (ClamAV) software versions 0.101 - 0.102.2 are affected by CVE-2020-3341.
Where can I find more information about CVE-2020-3341?
You can find more information about CVE-2020-3341 on the CVE Mitre, ClamAV blog, and Ubuntu security notices websites.