PT-2020-16535 · Canimaan · Clamav

Csaba Fitzl + 1 · Published 2020-10-16 · Updated 2020-10-21 · CVE-2020-26893

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ClamXAV versions prior to 3.1.1

Description An issue was discovered in ClamXAV where a malicious actor could use a properly signed copy of ClamXAV 2, running with an injected malicious dylib, to communicate with ClamXAV 3's helper tool and perform privileged operations. This occurs because of inadequate client verification in the helper tool.

Recommendations For ClamXAV versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the helper tool to minimize the risk of exploitation.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2020-26893

Affected Products

Clamav

References · 4

• https://osv.dev/vulnerability/CVE-2020-26893 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26893 · Security Note
• https://gist.github.com/matt-clamxav/d341bd48f12a14d2147f8ce860bb36d0 · Note
• https://t.me/cibsecurity/15321 · Telegram Post