Skip to content
fr Sign in
7.5 High

CVE-2024-20380 A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of…

Description

A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an issue in the C to Rust foreign function interface. An attacker could exploit this vulnerability by submitting a crafted file containing HTML content to be scanned by ClamAV on an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.

Affected products and versions

Product Affected versions Fixed in
ClamAV 1.3 No fix stated
clam_antivirus 1.3 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of ClamAV

The 22 CVEs of ClamAV →
CVE-2025-20260 ClamAV PDF Scanning Buffer Overflow Vulnerability 9.8 Critical CVE-2024-20506 A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all… 6.1 Medium CVE-2024-20505 A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x… 4.0 Medium CVE-2024-20328 A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the… 5.3 Medium
Track this CVE