CVE-2020-3481: Clam AntiVirus (ClamAV) Software Null Pointer Dereference Vulnerability
A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a null pointer dereference. An attacker could exploit this vulnerability by sending a crafted EGG file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2020-3481?
CVE-2020-3481 is a vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3.
How does CVE-2020-3481 impact the affected devices?
CVE-2020-3481 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.
What is the severity of CVE-2020-3481?
CVE-2020-3481 has a severity value of 7.5 (High).
How can I fix the CVE-2020-3481 vulnerability on my device?
To fix the CVE-2020-3481 vulnerability, update the Clam AntiVirus (ClamAV) Software to versions 0.103.6+dfsg-0+deb10u1, 0.103.9+dfsg-0+deb10u1, 0.103.10+dfsg-0+deb11u1, 1.0.3+dfsg-1~deb12u1, or 1.0.3+dfsg-2.
Where can I find more information about CVE-2020-3481?
You can find more information about CVE-2020-3481 at the following references: [CVE-2020-3481](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3481), [ClamAV Blog](https://blog.clamav.net/2020/07/clamav-01024-security-patch-released.html), [Ubuntu Security Notice USN-4435-1](https://ubuntu.com/security/notices/USN-4435-1).