Bug 1858264 (CVE-2020-3481) - CVE-2020-3481 clamav: improper error handling causing crash due to NULL pointer dereference
Summary: CVE-2020-3481 clamav: improper error handling causing crash due to NULL point...
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2020-3481
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1858265 1858266
Blocks: 1858267
TreeView+ depends on / blocked
 
Reported: 2020-07-17 11:40 UTC by Dhananjay Arunesh
Modified: 2021-02-16 19:38 UTC (History)
12 users (show)

Fixed In Version: version 0.103.0
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-07-22 07:27:37 UTC
Embargoed:

Attachments (Terms of Use)

Description Dhananjay Arunesh 2020-07-17 11:40:25 UTC 
Fixed a vulnerability in the EGG archive module in ClamAV 0.102.0 - 0.102.3 that could cause a denial-of-service (DoS) condition. Improper error handling could cause a crash due to a NULL pointer dereference. This vulnerability is mitigated for those using the official ClamAV signature databases because the file type signatures in daily.cvd will not enable the EGG archive parser in affected versions.
Comment 1 Dhananjay Arunesh 2020-07-17 11:41:51 UTC 
Created clamav tracking bugs for this issue:

Affects: epel-all [bug 1858266]
Affects: fedora-all [bug 1858265]
Comment 2 Florencio Cano 2020-07-22 07:16:32 UTC 
External References:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3481
https://blog.clamav.net/2020/07/clamav-01024-security-patch-released.html
https://nvd.nist.gov/vuln/detail/CVE-2020-3481#
https://github.com/Cisco-Talos/clamav-devel/commit/8bb3716be9c7ab7c6a3a1889267b1072f48af87b
Comment 3 Florencio Cano 2020-07-22 07:19:14 UTC 
Mitigation:

There is no mitigation for this issue, the flaw can only be resolved by applying updates.
Comment 4 Product Security DevOps Team 2020-07-22 07:27:37 UTC 
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2020-3481
Note You need to log in before you can comment on or make changes to this bug.