7.5
Élevée
CVE-2024-20380 A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of…
Description
A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an issue in the C to Rust foreign function interface. An attacker could exploit this vulnerability by submitting a crafted file containing HTML content to be scanned by ClamAV on an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ClamAV | 1.3 | Pas de correctif indiqué |
| clam_antivirus | 1.3 | Pas de correctif indiqué |
Références
- blog.clamav.net blog.clamav.net
Chronologie
- Publiée
- Dernière modification
Autres CVE de ClamAV
Les 22 CVE de ClamAV →
CVE-2025-20260
ClamAV PDF Scanning Buffer Overflow Vulnerability
9.8
Critique
CVE-2024-20506
A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all…
6.1
Moyenne
CVE-2024-20505
A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x…
4.0
Moyenne
CVE-2024-20328
A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the…
5.3
Moyenne