Vulnerability from csaf_suse
Published
2020-12-22 13:18
Modified
2020-12-22 13:18
Summary
Security update for clamav
Notes
Title of the patch
Security update for clamav
Description of the patch
This update for clamav fixes the following issues:
clamav was updated to 0.103.0 to implement jsc#ECO-3010 and bsc#1118459.
* clamd can now reload the signature database without blocking
scanning. This multi-threaded database reload improvement was made
possible thanks to a community effort.
- Non-blocking database reloads are now the default behavior. Some
systems that are more constrained on RAM may need to disable
non-blocking reloads as it will temporarily consume two times as
much memory. We added a new clamd config option
ConcurrentDatabaseReload, which may be set to no.
* Fix clamav-milter.service (requires clamd.service to run)
* bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
* Partial sync with SLE15.
Update to version 0.102.4
Accumulated security fixes:
* CVE-2020-3350: Fix a vulnerability wherein a malicious user could
replace a scan target's directory with a symlink to another path
to trick clamscan, clamdscan, or clamonacc into removing or moving
a different file (eg. a critical system file). The issue would
affect users that use the --move or --remove options for clamscan,
clamdscan, and clamonacc. (bsc#1174255)
* CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
module in ClamAV 0.102.3 that could cause a Denial-of-Service
(DoS) condition. Improper bounds checking results in an
out-of-bounds read which could cause a crash. The previous fix for
this CVE in 0.102.3 was incomplete. This fix correctly resolves
the issue.
* CVE-2020-3481: Fix a vulnerability in the EGG archive module in
ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
condition. Improper error handling may result in a crash due to a
NULL pointer dereference. This vulnerability is mitigated for
those using the official ClamAV signature databases because the
file type signatures in daily.cvd will not enable the EGG archive
parser in versions affected by the vulnerability. (bsc#1174250)
* CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
condition. Improper size checking of a buffer used to initialize AES
decryption routines results in an out-of-bounds read which may cause
a crash. (bsc#1171981)
* CVE-2020-3123: A denial-of-service (DoS) condition may occur when
using the optional credit card data-loss-prevention (DLP) feature.
Improper bounds checking of an unsigned variable resulted in an
out-of-bounds read, which causes a crash.
* CVE-2019-15961: A Denial-of-Service (DoS) vulnerability may
occur when scanning a specially crafted email file as a result
of excessively long scan times. The issue is resolved by
implementing several maximums in parsing MIME messages and by
optimizing use of memory allocation. (bsc#1157763).
* CVE-2019-12900: An out of bounds write in the NSIS bzip2
(bsc#1149458)
* CVE-2019-12625: Introduce a configurable time limit to mitigate
zip bomb vulnerability completely. Default is 2 minutes,
configurable useing the clamscan --max-scantime and for clamd
using the MaxScanTime config option (bsc#1144504)
Update to version 0.101.3:
* ZIP bomb causes extreme CPU spikes (bsc#1144504)
Update to version 0.101.2 (bsc#1118459):
* Support for RAR v5 archive extraction.
* Incompatible changes to the arguments of cl_scandesc,
cl_scandesc_callback, and cl_scanmap_callback.
* Scanning options have been converted from a single flag
bit-field into a structure of multiple categorized flag
bit-fields.
* The CL_SCAN_HEURISTIC_ENCRYPTED scan option was replaced by
2 new scan options: CL_SCAN_HEURISTIC_ENCRYPTED_ARCHIVE, and
CL_SCAN_HEURISTIC_ENCRYPTED_DOC
* Incompatible clamd.conf and command line interface changes.
* Heuristic Alerts' (aka 'Algorithmic Detection') options have
been changed to make the names more consistent. The original
options are deprecated in 0.101, and will be removed in a
future feature release.
* For details, see https://blog.clamav.net/2018/12/clamav-01010-has-been-released.html
Patchnames
HPE-Helion-OpenStack-8-2020-3918,SUSE-2020-3918,SUSE-OpenStack-Cloud-7-2020-3918,SUSE-OpenStack-Cloud-8-2020-3918,SUSE-OpenStack-Cloud-9-2020-3918,SUSE-OpenStack-Cloud-Crowbar-8-2020-3918,SUSE-OpenStack-Cloud-Crowbar-9-2020-3918,SUSE-SLE-SAP-12-SP2-2020-3918,SUSE-SLE-SAP-12-SP3-2020-3918,SUSE-SLE-SAP-12-SP4-2020-3918,SUSE-SLE-SERVER-12-SP2-2020-3918,SUSE-SLE-SERVER-12-SP2-BCL-2020-3918,SUSE-SLE-SERVER-12-SP3-2020-3918,SUSE-SLE-SERVER-12-SP3-BCL-2020-3918,SUSE-SLE-SERVER-12-SP4-LTSS-2020-3918,SUSE-Storage-5-2020-3918
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for clamav", title: "Title of the patch", }, { category: "description", text: "This update for clamav fixes the following issues:\n\nclamav was updated to 0.103.0 to implement jsc#ECO-3010 and bsc#1118459.\n\n* clamd can now reload the signature database without blocking\n scanning. This multi-threaded database reload improvement was made\n possible thanks to a community effort.\n - Non-blocking database reloads are now the default behavior. Some\n systems that are more constrained on RAM may need to disable\n non-blocking reloads as it will temporarily consume two times as\n much memory. We added a new clamd config option\n ConcurrentDatabaseReload, which may be set to no.\n* Fix clamav-milter.service (requires clamd.service to run)\n* bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.\n* Partial sync with SLE15.\n\nUpdate to version 0.102.4\n\nAccumulated security fixes:\n\n* CVE-2020-3350: Fix a vulnerability wherein a malicious user could\n replace a scan target's directory with a symlink to another path\n to trick clamscan, clamdscan, or clamonacc into removing or moving\n a different file (eg. a critical system file). The issue would\n affect users that use the --move or --remove options for clamscan,\n clamdscan, and clamonacc. (bsc#1174255)\n* CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing\n module in ClamAV 0.102.3 that could cause a Denial-of-Service\n (DoS) condition. Improper bounds checking results in an\n out-of-bounds read which could cause a crash. The previous fix for\n this CVE in 0.102.3 was incomplete. This fix correctly resolves\n the issue.\n* CVE-2020-3481: Fix a vulnerability in the EGG archive module in\n ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)\n condition. Improper error handling may result in a crash due to a\n NULL pointer dereference. This vulnerability is mitigated for\n those using the official ClamAV signature databases because the\n file type signatures in daily.cvd will not enable the EGG archive\n parser in versions affected by the vulnerability. (bsc#1174250)\n* CVE-2020-3341: Fix a vulnerability in the PDF parsing module in\n ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)\n condition. Improper size checking of a buffer used to initialize AES\n decryption routines results in an out-of-bounds read which may cause\n a crash. (bsc#1171981)\n* CVE-2020-3123: A denial-of-service (DoS) condition may occur when\n using the optional credit card data-loss-prevention (DLP) feature.\n Improper bounds checking of an unsigned variable resulted in an\n out-of-bounds read, which causes a crash.\n* CVE-2019-15961: A Denial-of-Service (DoS) vulnerability may\n occur when scanning a specially crafted email file as a result\n of excessively long scan times. The issue is resolved by\n implementing several maximums in parsing MIME messages and by\n optimizing use of memory allocation. (bsc#1157763).\n* CVE-2019-12900: An out of bounds write in the NSIS bzip2\n (bsc#1149458)\n* CVE-2019-12625: Introduce a configurable time limit to mitigate\n zip bomb vulnerability completely. Default is 2 minutes,\n configurable useing the clamscan --max-scantime and for clamd\n using the MaxScanTime config option (bsc#1144504)\n\nUpdate to version 0.101.3:\n\n* ZIP bomb causes extreme CPU spikes (bsc#1144504)\n\nUpdate to version 0.101.2 (bsc#1118459):\n\n* Support for RAR v5 archive extraction.\n* Incompatible changes to the arguments of cl_scandesc,\n cl_scandesc_callback, and cl_scanmap_callback.\n* Scanning options have been converted from a single flag\n bit-field into a structure of multiple categorized flag\n bit-fields.\n* The CL_SCAN_HEURISTIC_ENCRYPTED scan option was replaced by\n 2 new scan options: CL_SCAN_HEURISTIC_ENCRYPTED_ARCHIVE, and\n CL_SCAN_HEURISTIC_ENCRYPTED_DOC\n* Incompatible clamd.conf and command line interface changes.\n* Heuristic Alerts' (aka 'Algorithmic Detection') options have\n been changed to make the names more consistent. The original\n options are deprecated in 0.101, and will be removed in a\n future feature release.\n* For details, see https://blog.clamav.net/2018/12/clamav-01010-has-been-released.html", title: "Description of the patch", }, { category: "details", text: "HPE-Helion-OpenStack-8-2020-3918,SUSE-2020-3918,SUSE-OpenStack-Cloud-7-2020-3918,SUSE-OpenStack-Cloud-8-2020-3918,SUSE-OpenStack-Cloud-9-2020-3918,SUSE-OpenStack-Cloud-Crowbar-8-2020-3918,SUSE-OpenStack-Cloud-Crowbar-9-2020-3918,SUSE-SLE-SAP-12-SP2-2020-3918,SUSE-SLE-SAP-12-SP3-2020-3918,SUSE-SLE-SAP-12-SP4-2020-3918,SUSE-SLE-SERVER-12-SP2-2020-3918,SUSE-SLE-SERVER-12-SP2-BCL-2020-3918,SUSE-SLE-SERVER-12-SP3-2020-3918,SUSE-SLE-SERVER-12-SP3-BCL-2020-3918,SUSE-SLE-SERVER-12-SP4-LTSS-2020-3918,SUSE-Storage-5-2020-3918", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_3918-1.json", }, { category: "self", summary: "URL for SUSE-SU-2020:3918-1", url: "https://www.suse.com/support/update/announcement/2020/suse-su-20203918-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2020:3918-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2020-December/008110.html", }, { category: "self", summary: "SUSE Bug 1118459", url: "https://bugzilla.suse.com/1118459", }, { category: "self", summary: "SUSE Bug 1119353", url: "https://bugzilla.suse.com/1119353", }, { category: "self", summary: "SUSE Bug 1144504", url: "https://bugzilla.suse.com/1144504", }, { category: "self", summary: "SUSE Bug 1149458", url: "https://bugzilla.suse.com/1149458", }, { category: "self", summary: "SUSE Bug 1157763", url: "https://bugzilla.suse.com/1157763", }, { category: "self", summary: "SUSE Bug 1171981", url: "https://bugzilla.suse.com/1171981", }, { category: "self", summary: "SUSE Bug 1174250", url: "https://bugzilla.suse.com/1174250", }, { category: "self", summary: "SUSE Bug 1174255", url: "https://bugzilla.suse.com/1174255", }, { category: "self", summary: "SUSE CVE CVE-2019-12900 page", url: "https://www.suse.com/security/cve/CVE-2019-12900/", }, { category: "self", summary: "SUSE CVE CVE-2019-15961 page", url: "https://www.suse.com/security/cve/CVE-2019-15961/", }, { category: "self", summary: "SUSE CVE CVE-2020-3123 page", url: "https://www.suse.com/security/cve/CVE-2020-3123/", }, { category: "self", summary: "SUSE CVE CVE-2020-3327 page", url: "https://www.suse.com/security/cve/CVE-2020-3327/", }, { category: "self", summary: "SUSE CVE CVE-2020-3341 page", url: "https://www.suse.com/security/cve/CVE-2020-3341/", }, { category: "self", summary: "SUSE CVE CVE-2020-3350 page", url: "https://www.suse.com/security/cve/CVE-2020-3350/", }, { category: "self", summary: "SUSE CVE CVE-2020-3481 page", url: "https://www.suse.com/security/cve/CVE-2020-3481/", }, ], title: "Security update for clamav", tracking: { current_release_date: "2020-12-22T13:18:28Z", generator: { date: "2020-12-22T13:18:28Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2020:3918-1", initial_release_date: "2020-12-22T13:18:28Z", revision_history: [ { date: "2020-12-22T13:18:28Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "clamav-0.103.0-33.32.1.aarch64", product: { name: "clamav-0.103.0-33.32.1.aarch64", product_id: "clamav-0.103.0-33.32.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "clamav-0.103.0-33.32.1.i586", product: { name: "clamav-0.103.0-33.32.1.i586", product_id: "clamav-0.103.0-33.32.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "clamav-0.103.0-33.32.1.ppc64le", product: { name: "clamav-0.103.0-33.32.1.ppc64le", product_id: "clamav-0.103.0-33.32.1.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "clamav-0.103.0-33.32.1.s390", product: { name: "clamav-0.103.0-33.32.1.s390", product_id: "clamav-0.103.0-33.32.1.s390", }, }, ], category: "architecture", name: "s390", }, { branches: [ { category: "product_version", name: "clamav-0.103.0-33.32.1.s390x", product: { name: "clamav-0.103.0-33.32.1.s390x", product_id: "clamav-0.103.0-33.32.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "clamav-0.103.0-33.32.1.x86_64", product: { name: "clamav-0.103.0-33.32.1.x86_64", product_id: "clamav-0.103.0-33.32.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "HPE Helion OpenStack 8", product: { name: "HPE Helion OpenStack 8", product_id: "HPE Helion OpenStack 8", product_identification_helper: { cpe: "cpe:/o:suse:hpe-helion-openstack:8", }, }, }, { category: "product_name", name: "SUSE OpenStack Cloud 7", product: { name: "SUSE OpenStack Cloud 7", product_id: "SUSE OpenStack Cloud 7", product_identification_helper: { cpe: "cpe:/o:suse:suse-openstack-cloud:7", }, }, }, { category: "product_name", name: "SUSE OpenStack Cloud 8", product: { name: "SUSE OpenStack Cloud 8", product_id: "SUSE OpenStack Cloud 8", product_identification_helper: { cpe: "cpe:/o:suse:suse-openstack-cloud:8", }, }, }, { category: "product_name", name: "SUSE OpenStack Cloud 9", product: { name: "SUSE OpenStack Cloud 9", product_id: "SUSE OpenStack Cloud 9", product_identification_helper: { cpe: "cpe:/o:suse:suse-openstack-cloud:9", }, }, }, { category: "product_name", name: "SUSE OpenStack Cloud Crowbar 8", product: { name: "SUSE OpenStack Cloud Crowbar 8", product_id: "SUSE OpenStack Cloud Crowbar 8", product_identification_helper: { cpe: "cpe:/o:suse:suse-openstack-cloud-crowbar:8", }, }, }, { category: "product_name", name: "SUSE OpenStack Cloud Crowbar 9", product: { name: "SUSE OpenStack Cloud Crowbar 9", product_id: "SUSE OpenStack Cloud Crowbar 9", product_identification_helper: { cpe: "cpe:/o:suse:suse-openstack-cloud-crowbar:9", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12:sp3", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12:sp4", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP2-LTSS", product: { name: "SUSE Linux Enterprise Server 12 SP2-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS", product_identification_helper: { cpe: "cpe:/o:suse:sles-ltss:12:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP2-BCL", product: { name: "SUSE Linux Enterprise Server 12 SP2-BCL", product_id: "SUSE Linux Enterprise Server 12 SP2-BCL", product_identification_helper: { cpe: "cpe:/o:suse:sles-bcl:12:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP3-LTSS", product: { name: "SUSE Linux Enterprise Server 12 SP3-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS", product_identification_helper: { cpe: "cpe:/o:suse:sles-ltss:12:sp3", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP3-BCL", product: { name: "SUSE Linux Enterprise Server 12 SP3-BCL", product_id: "SUSE Linux Enterprise Server 12 SP3-BCL", product_identification_helper: { cpe: "cpe:/o:suse:sles-bcl:12:sp3", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP4-LTSS", product: { name: "SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS", product_identification_helper: { cpe: "cpe:/o:suse:sles-ltss:12:sp4", }, }, }, { category: "product_name", name: "SUSE Enterprise Storage 5", product: { name: "SUSE Enterprise Storage 5", product_id: "SUSE Enterprise Storage 5", product_identification_helper: { cpe: "cpe:/o:suse:ses:5", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of HPE Helion OpenStack 8", product_id: "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "HPE Helion OpenStack 8", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.s390x as component of SUSE OpenStack Cloud 7", product_id: "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", }, product_reference: "clamav-0.103.0-33.32.1.s390x", relates_to_product_reference: "SUSE OpenStack Cloud 7", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE OpenStack Cloud 7", product_id: "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud 7", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE OpenStack Cloud 8", product_id: "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud 8", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE OpenStack Cloud 9", product_id: "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud 9", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8", product_id: "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 8", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", product_id: "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", }, product_reference: "clamav-0.103.0-33.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", }, product_reference: "clamav-0.103.0-33.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", }, product_reference: "clamav-0.103.0-33.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", }, product_reference: "clamav-0.103.0-33.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-LTSS", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", }, product_reference: "clamav-0.103.0-33.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-LTSS", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-LTSS", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL", product_id: "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-BCL", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", }, product_reference: "clamav-0.103.0-33.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", }, product_reference: "clamav-0.103.0-33.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", }, product_reference: "clamav-0.103.0-33.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL", product_id: "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-BCL", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", }, product_reference: "clamav-0.103.0-33.32.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", }, product_reference: "clamav-0.103.0-33.32.1.ppc64le", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", }, product_reference: "clamav-0.103.0-33.32.1.s390x", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.aarch64 as component of SUSE Enterprise Storage 5", product_id: "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", }, product_reference: "clamav-0.103.0-33.32.1.aarch64", relates_to_product_reference: "SUSE Enterprise Storage 5", }, { category: "default_component_of", full_product_name: { name: "clamav-0.103.0-33.32.1.x86_64 as component of SUSE Enterprise Storage 5", product_id: "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", }, product_reference: "clamav-0.103.0-33.32.1.x86_64", relates_to_product_reference: "SUSE Enterprise Storage 5", }, ], }, vulnerabilities: [ { cve: "CVE-2019-12900", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2019-12900", }, ], notes: [ { category: "general", text: "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.", title: "CVE description", }, ], product_status: { recommended: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2019-12900", url: "https://www.suse.com/security/cve/CVE-2019-12900", }, { category: "external", summary: "SUSE Bug 1139083 for CVE-2019-12900", url: "https://bugzilla.suse.com/1139083", }, { category: "external", summary: "SUSE Bug 1141513 for CVE-2019-12900", url: "https://bugzilla.suse.com/1141513", }, { category: "external", summary: "SUSE Bug 1149458 for CVE-2019-12900", url: "https://bugzilla.suse.com/1149458", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.4, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-12-22T13:18:28Z", details: "important", }, ], title: "CVE-2019-12900", }, { cve: "CVE-2019-15961", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2019-15961", }, ], notes: [ { category: "general", text: "A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to inefficient MIME parsing routines that result in extremely long scan times of specially formatted email files. An attacker could exploit this vulnerability by sending a crafted email file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to scan the crafted email file indefinitely, resulting in a denial of service condition.", title: "CVE description", }, ], product_status: { recommended: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2019-15961", url: "https://www.suse.com/security/cve/CVE-2019-15961", }, { category: "external", summary: "SUSE Bug 1157763 for CVE-2019-15961", url: "https://bugzilla.suse.com/1157763", }, { category: "external", summary: "SUSE Bug 1180082 for CVE-2019-15961", url: "https://bugzilla.suse.com/1180082", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-12-22T13:18:28Z", details: "important", }, ], title: "CVE-2019-15961", }, { cve: "CVE-2020-3123", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-3123", }, ], notes: [ { category: "general", text: "A vulnerability in the Data-Loss-Prevention (DLP) module in Clam AntiVirus (ClamAV) Software versions 0.102.1 and 0.102.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to an out-of-bounds read affecting users that have enabled the optional DLP feature. An attacker could exploit this vulnerability by sending a crafted email file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.", title: "CVE description", }, ], product_status: { recommended: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-3123", url: "https://www.suse.com/security/cve/CVE-2020-3123", }, { category: "external", summary: "SUSE Bug 1162921 for CVE-2020-3123", url: "https://bugzilla.suse.com/1162921", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-12-22T13:18:28Z", details: "important", }, ], title: "CVE-2020-3123", }, { cve: "CVE-2020-3327", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-3327", }, ], notes: [ { category: "general", text: "A vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a heap buffer overflow read. An attacker could exploit this vulnerability by sending a crafted ARJ file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.", title: "CVE description", }, ], product_status: { recommended: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-3327", url: "https://www.suse.com/security/cve/CVE-2020-3327", }, { category: "external", summary: "SUSE Bug 1171980 for CVE-2020-3327", url: "https://bugzilla.suse.com/1171980", }, { category: "external", summary: "SUSE Bug 1174250 for CVE-2020-3327", url: "https://bugzilla.suse.com/1174250", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-12-22T13:18:28Z", details: "important", }, ], title: "CVE-2020-3327", }, { cve: "CVE-2020-3341", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-3341", }, ], notes: [ { category: "general", text: "A vulnerability in the PDF archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.101 - 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a stack buffer overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.", title: "CVE description", }, ], product_status: { recommended: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-3341", url: "https://www.suse.com/security/cve/CVE-2020-3341", }, { category: "external", summary: "SUSE Bug 1171981 for CVE-2020-3341", url: "https://bugzilla.suse.com/1171981", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.4, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-12-22T13:18:28Z", details: "important", }, ], title: "CVE-2020-3341", }, { cve: "CVE-2020-3350", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-3350", }, ], notes: [ { category: "general", text: "A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could occur when scanning malicious files. An attacker with local shell access could exploit this vulnerability by executing a script that could trigger the race condition. A successful exploit could allow the attacker to delete arbitrary files on the system that the attacker would not normally have privileges to delete, producing system instability or causing the endpoint software to stop working.", title: "CVE description", }, ], product_status: { recommended: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-3350", url: "https://www.suse.com/security/cve/CVE-2020-3350", }, { category: "external", summary: "SUSE Bug 1174250 for CVE-2020-3350", url: "https://bugzilla.suse.com/1174250", }, { category: "external", summary: "SUSE Bug 1174255 for CVE-2020-3350", url: "https://bugzilla.suse.com/1174255", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", version: "3.1", }, products: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-12-22T13:18:28Z", details: "moderate", }, ], title: "CVE-2020-3350", }, { cve: "CVE-2020-3481", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-3481", }, ], notes: [ { category: "general", text: "A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a null pointer dereference. An attacker could exploit this vulnerability by sending a crafted EGG file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.", title: "CVE description", }, ], product_status: { recommended: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-3481", url: "https://www.suse.com/security/cve/CVE-2020-3481", }, { category: "external", summary: "SUSE Bug 1174250 for CVE-2020-3481", url: "https://bugzilla.suse.com/1174250", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "HPE Helion OpenStack 8:clamav-0.103.0-33.32.1.x86_64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.aarch64", "SUSE Enterprise Storage 5:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP2-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-BCL:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP3-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP3:clamav-0.103.0-33.32.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.s390x", "SUSE OpenStack Cloud 7:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud 9:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 8:clamav-0.103.0-33.32.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:clamav-0.103.0-33.32.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-12-22T13:18:28Z", details: "important", }, ], title: "CVE-2020-3481", }, ], }
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.