CVE-2024-20380
Fixed in a distro release EPSS 1%CVSS 7.5
A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an issue in the C to Rust foreign function interface. An attacker could exploit this vulnerability by submitting a crafted file containing HTML content to be scanned by ClamAV on an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Products: Cisco ClamAV, cisco clam_antivirus
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | clamav | 1.3.1-r0 |
| Chainguard | clamav-1.3 | 1.3.1-r0 |
| Chainguard | clamav-1.3-clamdscan | 1.3.1-r0 |
| Chainguard | clamav-1.3-daemon | 1.3.1-r0 |
| Chainguard | clamav-1.3-db | 1.3.1-r0 |
| Chainguard | clamav-1.3-dev | 1.3.1-r0 |
| Chainguard | clamav-1.3-doc | 1.3.1-r0 |
| Chainguard | clamav-1.3-freshclam | 1.3.1-r0 |
| Chainguard | clamav-1.3-libunrar | 1.3.1-r0 |
| Chainguard | clamav-1.3-milter | 1.3.1-r0 |
| Chainguard | clamav-1.3-scanner | 1.3.1-r0 |
| Chainguard | clamav-clamdscan | 1.3.1-r0 |
| Chainguard | clamav-daemon | 1.3.1-r0 |
| Chainguard | clamav-db | 1.3.1-r0 |
| Chainguard | clamav-dev | 1.3.1-r0 |
| Chainguard | clamav-doc | 1.3.1-r0 |
| Chainguard | clamav-libunrar | 1.3.1-r0 |
| Chainguard | clamav-milter | 1.3.1-r0 |
| Chainguard | clamav-scanner | 1.3.1-r0 |
| Chainguard | freshclam | 1.3.1-r0 |
| SUSE Enterprise Storage 7.1 | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise Micro 5.5 | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | clamav | 1.4.2-150600.18.6.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | clamav | 1.4.2-3.36.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | clamav | 1.4.2-3.36.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | clamav | 1.4.2-150200.8.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | clamav | 1.4.2-150200.8.3.1 |
| SUSE Manager Proxy 4.3 | clamav | 1.4.2-150200.8.3.1 |
| SUSE Manager Server 4.3 | clamav | 1.4.2-150200.8.3.1 |
| Wolfi | clamav | 1.3.1-r0 |
| Wolfi | clamav-1.3 | 1.3.1-r0 |
| Wolfi | clamav-1.3-clamdscan | 1.3.1-r0 |
| Wolfi | clamav-1.3-daemon | 1.3.1-r0 |
| Wolfi | clamav-1.3-db | 1.3.1-r0 |
| Wolfi | clamav-1.3-dev | 1.3.1-r0 |
| Wolfi | clamav-1.3-doc | 1.3.1-r0 |
| Wolfi | clamav-1.3-freshclam | 1.3.1-r0 |
| Wolfi | clamav-1.3-libunrar | 1.3.1-r0 |
| Wolfi | clamav-1.3-milter | 1.3.1-r0 |
| Wolfi | clamav-1.3-scanner | 1.3.1-r0 |
| Wolfi | clamav-clamdscan | 1.3.1-r0 |
| Wolfi | clamav-daemon | 1.3.1-r0 |
| Wolfi | clamav-db | 1.3.1-r0 |
| Wolfi | clamav-dev | 1.3.1-r0 |
| Wolfi | clamav-doc | 1.3.1-r0 |
| Wolfi | clamav-libunrar | 1.3.1-r0 |
| Wolfi | clamav-milter | 1.3.1-r0 |
| Wolfi | clamav-scanner | 1.3.1-r0 |
| Wolfi | freshclam | 1.3.1-r0 |
| openSUSE Leap 15.6 | clamav | 1.4.2-150600.18.6.1 |
| openSUSE Tumbleweed | clamav | 1.3.1-1.1 |