CVE-2024-20505
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-20505
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-20505.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-20505
- Related
- Published
- 2024-09-04T22:15:03Z
- Modified
- 2024-12-05T15:36:27.633195Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
The vulnerability is due to an out of bounds read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. An exploit could allow the attacker to terminate the scanning process.
- References
Affected packages
Debian:11 / clamav
Package
- Name
- clamav
- Purl
- pkg:deb/debian/clamav?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.0.7+dfsg-1~deb11u1
Affected versions
0.*
0.103.2+dfsg-2
0.103.3+dfsg-0+deb11u1
0.103.3+dfsg-1
0.103.4+dfsg-0+deb11u1
0.103.4+dfsg-1
0.103.5+dfsg-0+deb11u1
0.103.5+dfsg-1
0.103.6+dfsg-0+deb11u1
0.103.6+dfsg-1
0.103.7+dfsg-0+deb11u1
0.103.7+dfsg-1
0.103.8+dfsg-0+deb11u1
0.103.9+dfsg-0+deb11u1
0.103.10+dfsg-0+deb11u1
1.*
1.0.0+dfsg-1
1.0.0+dfsg-2
1.0.0+dfsg-3
1.0.0+dfsg-4
1.0.0+dfsg-5
1.0.0+dfsg-6
1.0.1+dfsg-1
1.0.1+dfsg-2
1.0.2+dfsg-1~deb12u1
1.0.2+dfsg-1
1.0.3+dfsg-1~deb12u1
1.0.3+dfsg-1
1.0.3+dfsg-2
1.0.4+dfsg-1
1.0.5+dfsg-1~deb12u1
1.0.5+dfsg-1
1.0.5+dfsg-1.1
1.0.6+dfsg-1
Debian:12 / clamav
Package
- Name
- clamav
- Purl
- pkg:deb/debian/clamav?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.0.7+dfsg-1~deb12u1
Debian:13 / clamav
Package
- Name
- clamav
- Purl
- pkg:deb/debian/clamav?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.4.1+dfsg-1
Affected versions
1.*
1.0.1+dfsg-2
1.0.2+dfsg-1~deb12u1
1.0.2+dfsg-1
1.0.3+dfsg-1~deb12u1
1.0.3+dfsg-1
1.0.3+dfsg-2
1.0.4+dfsg-1
1.0.5+dfsg-1~deb12u1
1.0.5+dfsg-1
1.0.5+dfsg-1.1
1.0.6+dfsg-1
1.0.7+dfsg-1~deb11u1
1.0.7+dfsg-1~deb12u1
1.2.1+dfsg-1
1.2.1+dfsg-2
1.2.1+dfsg-3
1.3.1+dfsg-1
1.3.1+dfsg-2
1.3.1+dfsg-3
1.3.1+dfsg-4
1.3.1+dfsg-5
Git / github.com/cisco-talos/clamav
Affected ranges
- Type
- GIT
- Repo
- https://github.com/cisco-talos/clamav
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
clamav-0.*
clamav-0.101.0
clamav-0.102.0
clamav-0.103.0
clamav-0.103.0-rc
clamav-0.103.0-rc2
clamav-0.103.1
clamav-0.103.10
clamav-0.103.11
clamav-0.103.2
clamav-0.103.3
clamav-0.103.4
clamav-0.103.5
clamav-0.103.6
clamav-0.103.7
clamav-0.103.8
clamav-0.103.9
clamav-0.96
clamav-0.96.2
clamav-0.96.3
clamav-0.96.4
clamav-0.96.5
clamav-0.96rc1
clamav-0.96rc2
clamav-0.97
clamav-0.97rc
clamav-0.98-dmgxar
clamav-0.99-beta1
Other
merge-llvm-79908
merge-llvm-80601
merge-llvm-83242
merge-llvm-90002
merge-llvm-91214
merge-llvm-91428
merge-llvm-92222
merge-llvm-94539
merge-llvm-97877
r5076