ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service und Dateimanipulation

Summary

Product

Vulnerabilities 2

• Medium 6.1
  CVE-2024-20506

  ClamAV Privilege Handling Escalation Vulnerability

  A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an authe…

  Cisco ClamAV clamav clamav Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Sep 4, 2024
• Medium 4.0
  CVE-2024-20505

  ClamAV Memory Handling DoS

  A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthe…

  Cisco ClamAV clamav clamav Network devices Debian Ubuntu Azure Linux Alpine Wolfi
  Sep 4, 2024

Revision history

1. 2025-07-08 #9

   Neue Updates von Gentoo aufgenommen

2. 2025-02-03 #8

   Neue Updates von SUSE aufgenommen

3. 2024-12-05 #7

   Neue Updates von Debian aufgenommen

4. 2024-10-03 #6

   Neue Updates von Amazon aufgenommen

5. 2024-09-18 #5

   Neue Updates von SUSE aufgenommen

6. 2024-09-16 #4

   Neue Updates von Ubuntu aufgenommen

7. 2024-09-12 #3

   Neue Updates von SUSE aufgenommen

8. 2024-09-05 #2

   Neue Updates von Fedora aufgenommen

9. 2024-09-04 #1

   Initiale Fassung

References

• GitHub Cisco-Talos vom 2024-09-04
  https://github.com/Cisco-Talos/clamav/releases/tag/clamav-0.103.12
• NIST Vulnerability Database vom 2024-09-04
  https://nvd.nist.gov/vuln/detail/CVE-2024-20506
• NIST Vulnerability Database vom 2024-09-04
  https://nvd.nist.gov/vuln/detail/CVE-2024-20505
• ClamAV Blog
  https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
• Fedora Security Advisory FEDORA-2024-0D7EB64D90 vom 2024-09-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-0d7eb64d90
• Fedora Security Advisory FEDORA-2024-E8F7A74693 vom 2024-09-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-e8f7a74693
• Fedora Security Advisory FEDORA-EPEL-2024-702A565078 vom 2024-09-05
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-702a565078
• Fedora Security Advisory FEDORA-EPEL-2024-CEF1A533B1 vom 2024-09-06
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-cef1a533b1
• Fedora Security Advisory FEDORA-2024-05D7EE197E vom 2024-09-06
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-05d7ee197e
• SUSE Security Update SUSE-SU-2024:3228-1 vom 2024-09-12
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019429.html
• Ubuntu Security Notice USN-7011-1 vom 2024-09-16
  https://ubuntu.com/security/notices/USN-7011-1
• Ubuntu Security Notice USN-7011-2 vom 2024-09-17
  https://ubuntu.com/security/notices/USN-7011-2
• SUSE Security Update SUSE-SU-2024:3306-1 vom 2024-09-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019451.html
• SUSE Security Update SUSE-SU-2024:3305-1 vom 2024-09-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-September/019452.html
• Amazon Linux Security Advisory ALAS-2024-2644 vom 2024-10-02
  https://alas.aws.amazon.com/AL2/ALAS-2024-2644.html
• Debian Security Advisory DLA-3983 vom 2024-12-06
  https://lists.debian.org/debian-lts-announce/2024/12/msg00004.html
• SUSE Security Update SUSE-SU-2025:0325-1 vom 2025-02-03
  https://lists.suse.com/pipermail/sle-security-updates/2025-February/020258.html
• SUSE Security Update SUSE-SU-2025:0328-1 vom 2025-02-03
  https://lists.suse.com/pipermail/sle-security-updates/2025-February/020256.html
• SUSE Security Update SUSE-SU-2025:0327-1 vom 2025-02-03
  https://lists.suse.com/pipermail/sle-security-updates/2025-February/020257.html
• Gentoo Linux Security Advisory GLSA-202507-03 vom 2025-07-09
  https://security.gentoo.org/glsa/202507-03