PT-2026-7942 · Cisco · Clamav

CVE-2020-37167 · Publicado 2020-07-22 · Atualizado 2026-02-27

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 0.102.0

Description The ClamAV ClamBC bytecode interpreter has a flaw in how it handles function names. This allows manipulation of bytecode function names due to weak input validation in function name encoding. Successful exploitation could lead to the execution of malicious bytecode or cause unpredictable behavior within the ClamAV engine.

Recommendations Update ClamAV to a version newer than 0.102.0.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2026-02545

CVE-2020-37167

Produtos afetados

Clamav

Referências · 18

• 🔥 https://exploit-db.com/exploits/47687 · Exploit
• https://github.com/Cisco-Talos/clamav/commit/cd2f2975b93277de7f74464d48adb378375a305f · Correção
• https://github.com/Cisco-Talos/clamav/releases/tag/clamav-1.5.1 · Nota
• https://t.me/CVEtracker/44584 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2020-37167 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-02545 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2020-37167 · Aviso do Fabricante
• https://clamav.net · Nota
• https://dbugs.ptsecurity.com/vulnerability/PT-2026-7942 · Nota
• https://cve.org/CVERecord?id=CVE-2020-37167 · Nota de Segurança
• https://vulncheck.com/advisories/clamav-clambc-clambc-executable-regular-expression · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-37167 · Aviso do Fabricante
• https://t.me/cveNotify/153587 · Publicação no Telegram
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-37167 · Aviso do Fabricante
• https://t.me/cveNotify/153544 · Publicação no Telegram