VDB
DEBIAN-CVE-2023-20212
DEBIAN-CVE-2023-20212
PUBLISHED
CVSS 7.5 HIGH
A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An attacker could exploit this vulnerability by submitting a crafted AutoIt file to be scanned by ClamAV on the affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to restart unexpectedly, resulting in a DoS condition.
Risk Scores
CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | clamav | 0, 0, 0 |
| Debian:14 | clamav | 0, 0, 0 |
| Debian:12 | clamav | 1.0.1+dfsg-2, 0, 1.0.1+dfsg-2 |
Timeline
- Aug 18, 2023 CVE Published
- Apr 28, 2026 CVE Updated