PT-2019-15252 · Cisco+2 · Clamav+2

Published 2019-03-28 · Updated 2024-06-15 · CVE-2019-1785

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ClamAV versions 0.101.0 through 0.101.1

Description A denial of service condition can be caused by an unauthenticated, remote attacker on an affected device due to improper error-handling mechanisms when processing nested RAR files. An attacker could exploit this by sending a crafted RAR file, potentially allowing them to view or create arbitrary files on the targeted system.

Recommendations For ClamAV versions 0.101.0 and 0.101.1, consider disabling the RAR file scanning functionality as a temporary workaround until a patch is available. Restrict access to the affected device to minimize the risk of exploitation.

Fix

DoS

RCE

Path traversal

Weakness Enumeration

CWE-20

CWE-22

Related Identifiers

ALT-PU-2019-1538

CVE-2019-1785

OPENSUSE-SU-2020:2268-1

OPENSUSE-SU-2020:2276-1

OPENSUSE-SU-2020_2268-1

OPENSUSE-SU-2020_2276-1

OPENSUSE-SU-2024:10685-1

SUSE-SU-2020:3790-1

Affected Products

Alt Linux

Clamav

Suse

References · 113

• https://security.gentoo.org/glsa/201904-12 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01403 · Security Note
• https://bdu.fstec.ru/vul/2019-02881 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10685-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:3790-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1788 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-1785 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2020:2276-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-1785 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1787 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1785 · Security Note
• https://bdu.fstec.ru/vul/2020-03143 · Security Note
• https://bdu.fstec.ru/vul/2020-05768 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1798 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-1785 · Security Note