Fluid Attacks Database

Description

A vulnerability in the PDF archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.101 - 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a stack buffer overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 14	clamav	>=0 <0.102.3+dfsg-1	0.102.3+dfsg-1
debian 13	clamav	>=0 <0.102.3+dfsg-1	0.102.3+dfsg-1
alpine v3.13	clamav	>=0 <0.102.3-r0	0.102.3-r0
alpine v3.11	clamav	>=0 <0.102.3-r0	0.102.3-r0
alpine v3.12	clamav	>=0 <0.102.3-r0	0.102.3-r0
debian 12	clamav	>=0 <0.102.3+dfsg-1	0.102.3+dfsg-1

Aliases

1. CVE-2020-33412. NVD-2020-33413. OSV-DEBIAN-2020-33414. OSV-2020-33415. OSV-ALPINE-2020-33416. SECURITY-TRACKER-CVE-2020-33417. SECURITY-CVE-2020-3341

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.