CVE-2023-20052
Summary
| CVE | CVE-2023-20052 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2023-03-01 08:15:00 UTC |
|---|
| Updated | 2024-01-25 17:15:00 UTC |
|---|
| Description | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed:
A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device.
This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| ClamAV: Multiple Vulnerabilities (GLSA 202310-01) — Gentoo security |
MISC |
security.gentoo.org |
|
| ClamAV DMG File Parsing XML Entity Expansion Vulnerability Affecting Cisco Products: February 2023 |
MISC |
sec.cloudapps.cisco.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 181595 Debian Security Update for clamav (DLA 3328-1)
- 182844 Debian Security Update for clamav (CVE-2023-20052)
- 199187 Ubuntu Security Notification for ClamAV Vulnerabilities (USN-5887-1)
- 283722 Fedora Security Update for clamav (FEDORA-2023-d686b8d48f)
- 283724 Fedora Security Update for clamav (FEDORA-2023-3ba365d538)
- 354748 Amazon Linux Security Advisory for clamav : ALAS-2023-1694
- 354777 Amazon Linux Security Advisory for clamav : ALAS2-2023-1964
- 355247 Amazon Linux Security Advisory for clamav : ALAS2023-2023-112
- 378767 ClamAV Multiple Vulnerabilities (CVE-2023-20032 and CVE-2023-20052)
- 502833 Alpine Linux Security Update for clamav
- 503152 Alpine Linux Security Update for clamav
- 505991 Alpine Linux Security Update for clamav
- 691062 Free Berkeley Software Distribution (FreeBSD) Security Update for clamav (fd792048-ad91-11ed-a879-080027f5fec9)
- 710761 Gentoo Linux ClamAV Multiple Vulnerabilities (GLSA 202310-01)
- 753723 SUSE Enterprise Linux Security Update for clamav (SUSE-SU-2023:0453-1)
- 753774 SUSE Enterprise Linux Security Update for clamav (SUSE-SU-2023:0471-1)
- 753775 SUSE Enterprise Linux Security Update for clamav (SUSE-SU-2023:0471-1)
- 753776 SUSE Enterprise Linux Security Update for clamav (SUSE-SU-2023:0470-1)
- 905640 Common Base Linux Mariner (CBL-Mariner) Security Update for clamav (13723)
- 905694 Common Base Linux Mariner (CBL-Mariner) Security Update for clamav (13723-1)
- 906617 Common Base Linux Mariner (CBL-Mariner) Security Update for clamav (13723-3)
