UpHeron
All vulnerabilities

Servers and applications

CVE-2024-20380

A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an issue in the C to Rust foreign function interface. An attacker could exploit this vulnerability by submitting a crafted file containing HTML content to be scanned by ClamAV on an affected device. An exploit…

Severity
High 7.5
Published
18 Apr 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
ClamAVServers and applications · cpe:a:clamav:clamav
  • Version 1.3.0-rc
  • Version 1.3.0-rc2
  • Version 1.3.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-20380
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-20380