CVE-2024-20506

Name
CVE-2024-20506
Description
A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an authenticated, local attacker to corrupt critical system files. The vulnerability is due to allowing the ClamD process to write to its log file while privileged without checking if the logfile has been replaced with a symbolic link. An attacker could exploit this vulnerability if they replace the ClamD log file with a symlink to a critical system file and then find a way to restart the ClamD process. An exploit could allow the attacker to corrupt a critical system file by appending ClamD log messages after restart.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
af854a3a-2127-422b-91ae-364da2661108 https://lists.debian.org/debian-lts-announce/2024/12/msg00004.html

Match rules

CPE URI Source package Min version Max version
clamav == 1.4.0 == 1.4.0
clamav == 1.3.2 == 1.3.2
clamav == 1.0.6 == 1.0.6
clamav == 1.0.5 == 1.0.5
clamav == 1.0.4 == 1.0.4
clamav == 1.0.3 == 1.0.3
clamav == 1.0.2 == 1.0.2
clamav == 1.0.1 == 1.0.1
clamav == 1.0.0 == 1.0.0
clamav == 1.2.x == 1.2.x
clamav == 0.105.x == 0.105.x
clamav == 0.104.x == 0.104.x
clamav == 0.103.11 == 0.103.11
clamav == 0.103.10 == 0.103.10
clamav == 0.103.9 == 0.103.9
clamav == 0.103.8 == 0.103.8
clamav == 0.103.7 == 0.103.7
clamav == 0.103.6 == 0.103.6
clamav == 0.103.5 == 0.103.5
clamav == 0.103.4 == 0.103.4
clamav == 0.103.3 == 0.103.3
clamav == 0.103.2 == 0.103.2
clamav == 0.103.1 == 0.103.1
clamav == 0.103.0 == 0.103.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
clamav edge-community 1.3.2-r0 Carlo Landmeter <clandmeter@alpinelinux.org> fixed
clamav edge-community 1.0.1-r0 Carlo Landmeter <clandmeter@alpinelinux.org> possibly vulnerable
clamav edge-community 0.103.2-r0 Carlo Landmeter <clandmeter@alpinelinux.org> possibly vulnerable
clamav 3.22-community 1.3.2-r0 None fixed
clamav 3.22-community 1.0.1-r0 None possibly vulnerable
clamav 3.22-community 0.103.2-r0 None possibly vulnerable
clamav 3.21-community 1.3.2-r0 None fixed