ClamAV: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2024-20290 EPSS 33%

  A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a den…

  Cisco Cisco Secure Endpoint Cisco Secure Endpoint Private Cloud Administration Portal Cisco Secure Endpoint Private Cloud Console Network devices Debian Ubuntu Alpine
  Feb 7, 2024
• Medium 5.3
  CVE-2024-20328 EPSS 85%

  ClamAV VirusEvent File Processing Command Injection Vulnerability

  A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this…

  Cisco ClamAV clamav clamav Network devices Debian Ubuntu Azure Linux Alpine
  Mar 1, 2024

Revision history

1. 2025-07-08 #4

   Neue Updates von Gentoo aufgenommen

2. 2024-02-14 #3

   Neue Updates von Ubuntu aufgenommen

3. 2024-02-08 #2

   Neue Updates von Fedora aufgenommen

4. 2024-02-07 #1

   Initiale Fassung

References

• ClamAV Blog vom 2024-02-07
  http://blog.clamav.net/2023/11/clamav-130-122-105-released.html
• Cisco Security Advisory vom 2024-02-07
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-hDffu6t
• Fedora Security Advisory FEDORA-EPEL-2024-471565274B vom 2024-02-08
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-471565274b
• Fedora Security Advisory FEDORA-2024-3439911DF6 vom 2024-02-08
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-3439911df6
• Fedora Security Advisory FEDORA-2024-C42CF0E576 vom 2024-02-08
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-c42cf0e576
• Ubuntu Security Notice USN-6636-1 vom 2024-02-14
  https://ubuntu.com/security/notices/USN-6636-1
• Gentoo Linux Security Advisory GLSA-202507-03 vom 2025-07-09
  https://security.gentoo.org/glsa/202507-03