It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-112 advisory.

    Possible remote code execution vulnerability in the ClamAV HFS+ file parser. The issue affects ClamAV     versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (CVE-2023-20032)

    A possible remote information leak vulnerability in the DMG file parser. The issue affects versions 1.0.0     and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (CVE-2023-20052)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its version, the ClamAV clamd antivirus daemon running on the remote host is prior to 0.103.8, 0.104.x prior to 0.105.2, or 1.0.0. It is, therefore, affected by multiple vulnerabilities:

  - A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and     0.103.7 and earlier could allow an unauthenticated, remote attacker to execute arbitrary code. (CVE-2023-20032)

  - A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and     earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device.
    (CVE-2023-20052)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

The version of QNAP QTS / QuTS hero installed on the remote host is affected by multiple vulnerabilities as referenced in the QSA-23-26 advisory.

  - A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and     earlier, and 0.103.7and earlier could allow an unauthenticated, remote attacker to execute arbitrary     code. This vulnerability is due to a missing buffer size check that may result in a heap buffer overflow     write. An attacker could exploit this vulnerability by submitting a crafted HFS+ partition file to be     scanned by ClamAV on an affected device. A successful exploit could allow the attacker to execute     arbitrary code with the privileges of the ClamAV scanning process, or else crash the process, resulting     in a denial of service (DoS) condition. (CVE-2023-20032)

  - A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and     0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an     affected device. This vulnerability is due to enabling XML entity substitution that may result in XML     external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file     to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes     from any file that may be read by the ClamAV scanning process. (CVE-2023-20052)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of clamav installed on the remote host is prior to 0.103.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1964 advisory.

    Possible remote code execution vulnerability in the ClamAV HFS+ file parser. The issue affects ClamAV     versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (CVE-2023-20032)

    A possible remote information leak vulnerability in the DMG file parser. The issue affects versions 1.0.0     and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (CVE-2023-20052)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0453-1 advisory.

    - CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser     (bsc#1208363).
    - CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser     (bsc#1208365).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, Zimbra Collaboration Server is affected by multiple vulnerabilities in the bundled ClamAV package, including:

  - A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and     0.103.7 and earlier could allow an unauthenticated, remote attacker to execute arbitrary code. (CVE-2023-20032)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0470-1 advisory.

    - CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser     (bsc#1208363).
    - CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser     (bsc#1208365).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
173166	Amazon Linux 2023 : clamav, clamav-data, clamav-devel (ALAS2023-2023-112)	Nessus	Amazon Linux Local Security Checks	2023/3/21	2024/12/11	critical
172281	ClamAV < 0.103.8 / 0.104.x < 0.105.2 / 1.0.0 Multiple Vulnerabilities	Nessus	Misc.	2023/3/8	2025/8/19	critical
183970	QNAP QTS / QuTS hero Multiple Vulnerabilities in ClamAV (QSA-23-26)	Nessus	Misc.	2023/10/27	2023/11/7	critical
171832	Amazon Linux 2 : clamav (ALAS-2023-1964)	Nessus	Amazon Linux Local Security Checks	2023/2/23	2024/12/11	critical
171685	SUSE SLES12 Security Update : clamav (SUSE-SU-2023:0453-1)	Nessus	SuSE Local Security Checks	2023/2/21	2026/6/26	critical
173998	Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 38 / 9.0.0 < 9.0.0 Patch 31 Multiple Vulnerabilities in ClamAV	Nessus	CGI abuses	2023/4/6	2023/9/21	critical
171765	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : clamav (SUSE-SU-2023:0470-1)	Nessus	SuSE Local Security Checks	2023/2/22	2026/6/26	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical