OSV-2020-1804

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/clamav/OSV-2020-1804.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-1804
Published
2020-09-18T00:00:32.617703Z
Modified
2022-04-13T03:04:39.402517Z
Summary
Heap-buffer-overflow in text_normalize_buffer
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22211

Crash type: Heap-buffer-overflow READ 1
Crash state:
text_normalize_buffer
arj_read_main_header
cli_unarj_open
References

Affected packages

OSS-Fuzz / clamav

Package

Name
clamav
Purl
pkg:generic/clamav

Affected ranges

Type
GIT
Repo
https://github.com/Cisco-Talos/clamav-devel.git
Events
Introduced
5d411c68fb8a079748ddb6d3b115133ea0fdf242
Fixed
305df4091a36c35824f93da27347a39819ea70c6
Introduced
75a4267eff9a9e7a969735a0c83cd2d0f0082730
Fixed
899c20c85934c02e654d7feab935f1305a24acb6

Affected versions

clamav-0.*
clamav-0.102.2
clamav-0.102.3

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/clamav/OSV-2020-1804.yaml"