CVE-2020-37167 - Vulnerability Analysis

Overview

ClamAV ClamBC bytecode interpreter contains a vulnerability in function name processing caused by weak input validation in function name encoding, letting attackers execute malicious bytecode or cause unexpected behavior, exploit requires crafted bytecode.

Severity & Score

Impact

Attackers can execute malicious bytecode or cause unexpected behavior in the ClamAV engine, potentially compromising system security.

Mitigation

Update to the latest version of ClamAV.

References

• https://www.clamav.net/
• https://www.exploit-db.com/exploits/47687
• https://www.vulncheck.com/advisories/clamav-clambc-clambc-executable-regular-expression

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner