The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1433 advisory.

  - A vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2     could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected     device. The vulnerability is due to a heap buffer overflow read. An attacker could exploit this     vulnerability by sending a crafted ARJ file to an affected device. An exploit could allow the attacker to     cause the ClamAV scanning process crash, resulting in a denial of service condition. (CVE-2020-3327)

  - A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an     authenticated, local attacker to cause the running software to delete arbitrary files on the system. The     vulnerability is due to a race condition that could occur when scanning malicious files. An attacker with     local shell access could exploit this vulnerability by executing a script that could trigger the race     condition. A successful exploit could allow the attacker to delete arbitrary files on the system that the     attacker would not normally have privileges to delete, producing system instability or causing the     endpoint software to stop working. (CVE-2020-3350)

  - A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 -     0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition on an     affected device. The vulnerability is due to a null pointer dereference. An attacker could exploit this     vulnerability by sending a crafted EGG file to an affected device. An exploit could allow the attacker to     cause the ClamAV scanning process crash, resulting in a denial of service condition. (CVE-2020-3481)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux AMI : clamav (ALAS-2020-1433)

medium Nessus Plugin ID 140612

No changelogs found