OSV-2020-1792

Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/clamav/OSV-2020-1792.yaml
Published
2020-09-18T00:00:21.241767Z
Modified
2022-04-13T03:04:39.379926Z
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20464

Crash type: Heap-buffer-overflow READ 1
Crash state:
text_normalize_buffer
arj_read_file_header
cli_scanarj
References

Affected packages

OSS-Fuzz / clamav

Package

Name
clamav

Affected ranges

Type
GIT
Repo
https://github.com/Cisco-Talos/clamav-devel.git
Events
Introduced
5d411c68fb8a079748ddb6d3b115133ea0fdf242
Fixed
e8381da15c45ab72579218faa883d2dedcc502f8
Introduced
75a4267eff9a9e7a969735a0c83cd2d0f0082730
Fixed
6c4569edea524a65c409d256b60ee607162ce468

Affected versions

clamav-0.*

clamav-0.102.2

Ecosystem specific 

{
    "severity": "MEDIUM"
}