CVE-2024-20505: ClamAV Memory Handling DoS
First published: Wed Sep 04 2024(Updated: )
A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an out of bounds read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. An exploit could allow the attacker to terminate the scanning process.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/clamav | <=0.103.10+dfsg-0+deb11u1<=1.0.5+dfsg-1~deb12u1 | 1.4.1+dfsg-1 |
| ClamAV | <0.103.12 | |
| ClamAV | >=0.104.0<1.0.7 | |
| ClamAV | >=1.2.0<1.3.2 | |
| ClamAV | =1.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20505
- https://nvd.nist.gov/vuln/detail/CVE-2024-20505
- https://launchpad.net/bugs/cve/CVE-2024-20505
- https://security-tracker.debian.org/tracker/CVE-2024-20505
- https://ubuntu.com/security/CVE-2024-20505
Frequently Asked Questions
What is the severity of CVE-2024-20505?
CVE-2024-20505 is considered a high severity vulnerability in ClamAV that could allow unauthenticated remote attackers to exploit the system.
How do I fix CVE-2024-20505?
To fix CVE-2024-20505, upgrade ClamAV to version 1.4.1 or later.
What versions of ClamAV are affected by CVE-2024-20505?
CVE-2024-20505 affects ClamAV versions 1.4.0, 1.3.2, all 1.2.x, all 1.0.6 and prior, as well as all 0.105.x versions.
Can CVE-2024-20505 be exploited remotely?
Yes, CVE-2024-20505 can be exploited by an unauthenticated remote attacker.
Is there a patch available for CVE-2024-20505?
Yes, a patch is available in ClamAV version 1.4.1 and beyond to mitigate CVE-2024-20505.
- agent/title
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/references
- collector/usn-cve
- source/Ubuntu
- agent/event
- agent/description
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/trending
- agent/source
- agent/tags
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-api
- package-manager/debian
- vendor/clamav
- canonical/clamav
- version/clamav/0.104.0
- version/clamav/1.2.0
- version/clamav/1.4.0