漏洞信息详情
Clam AntiVirus 输入验证错误漏洞
- CNNVD编号：CNNVD-202005-690
- 危害等级： 高危
- CVE编号： CVE-2020-3341
- 漏洞类型： 输入验证错误
- 发布时间： 2020-05-12
- 威胁类型： 远程
- 更新时间： 2021-01-07
- 厂 商：
- 漏洞来源： Ubuntu
漏洞简介
Clam AntiVirus是ClamAV团队的一款用于检测木马，病毒，恶意软件和其他恶意威胁的开源杀毒引擎。
Clam AntiVirus 0.101版本至0.102.2版本中的PDF分析模块存在输入验证错误漏洞。攻击者可借助特制的PDF文件利用该漏洞导致拒绝服务。
漏洞公告
目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页：
https://www.clamav.net/
参考网址
来源:CISCO
链接:https://blog.clamav.net/2020/05/clamav-01023-security-patch-released.HTML
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2020/05/msg00018.HTML
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/3BMTC7I5LGY4FCIZLHPNC4WWC6VNLFER/
来源:UBUNTU
链接:https://usn.ubuntu.com/4370-2/
来源:UBUNTU
链接:https://usn.ubuntu.com/4370-1/
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/L5YWYT27SBTV4RZSGFHIQUI4LQVFASWS/
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/ROBJOGJOT44MVDX7RQEACYHQN4LYW5RK/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/157681/Clam-AntiVirus-Toolkit-0.102.3.HTML
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.4350/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/157799/Ubuntu-Security-Notice-USN-4370-2.HTML
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.0056/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.4412/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.1758/
来源:www.nsfocus.net
链接:http://www.nsfocus.net/vulndb/48880
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2020-3341
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.1831/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.1775/
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/ClamAV-denial-of-service-via-the-PDF-parser-32252
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.4540/
受影响实体
暂无
补丁
- Clam AntiVirus 输入验证错误漏洞的修复措施
评论