PT-2024-1939 · Clamav+1 · Clamav+1

Amit Schendel · Published 2024-02-07 · Updated 2026-02-21 · CVE-2024-20328

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)

Description A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account. The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file name containing command-line sequences. When processed on a system using configuration options for the VirusEvent feature, the attacker could cause the application to execute arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

AZL-35428

AZL-35431

BDU:2024-01734

CLEANSTART-2026-LA13761

CLEANSTART-2026-NJ87139

CLEANSTART-2026-TC95380

CLEANSTART-2026-WX01708

CVE-2024-20328

MGASA-2024-0048

USN-6636-1

Affected Products

Clamav

Ubuntu

References · 119

• https://nvd.nist.gov/vuln/detail/CVE-2017-11423 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-20328 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48579 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-12376 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0361 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-20328 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20197 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1404 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0202 · Security Note
• https://osv.dev/vulnerability/MGASA-2024-0048 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/5FXZYVDNV66RNMNVJOHAJAYRZV4U64CQ · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20698 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-NJ87139 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6419 · Security Note
• https://ubuntu.com/security/CVE-2024-20328 · Vendor Advisory