PT-2024-2947 · Clamav+1 · Clamav+1

Błażej Pawłowski

·

Published

2024-04-18

·

Updated

2025-07-23

·

CVE-2024-20380

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions ClamAV (affected versions not specified)
Description A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an issue in the C to Rust foreign function interface. An attacker could exploit this vulnerability by submitting a crafted file containing HTML content to be scanned by ClamAV on an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-475

Related Identifiers

BDU:2024-03114
CVE-2024-20380
OPENSUSE-SU-2024:14087-1
OPENSUSE-SU-2025_0327-1
SUSE-SU-2025:0325-1
SUSE-SU-2025:0327-1
SUSE-SU-2025:0328-1

Affected Products

Clamav
Suse