VDB
BDU%3A2024-01734
BDU%3A2024-01734
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Уязвимость функции VirusEvent службы ClamD пакета антивирусных программ ClamAV, позволяющая нарушителю выполнить произвольные команды
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | ClamAV | 1.2.0, 1.2.1 |
| cisco | clamav | 1.2.0, 1.2.1 |
| Cisco Systems Inc. | Clam Antivirus |
Timeline
- Feb 9, 2024 PoC Published
- Feb 12, 2024 PoC Published
- Mar 1, 2024 CVE Published
- Mar 1, 2024 PoC Published
- Mar 1, 2024 PoC Published
- Mar 4, 2024 CVE Updated
- Jul 27, 2024 PoC Published
- Jul 27, 2024 PoC Published
- Oct 4, 2024 PoC Published
- Oct 4, 2024 PoC Published
- Oct 4, 2024 PoC Published
- Oct 4, 2024 PoC Published
References
- https://amitschendel.github.io/vulnerabilites/CVE-2024-20328/ url
- https://blog.clamav.net/2023/11/clamav-130-122-105-released.html url
- https://www.securitylab.ru/news/tags/CVE-2024-20328/ url
- https://nvd.nist.gov/vuln/detail/CVE-2024-20328 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5FXZYVDNV66RNMNVJOHAJAYRZV4U64CQ/ url