CVE-2023-20032

Name of the Vulnerable Software and Affected Versions ClamAV versions 1.0.0 and earlier ClamAV versions 0.105.1 and earlier ClamAV versions 0.103.7 and earlier

Description The issue is related to a missing buffer size check in the HFS+ partition file parser of ClamAV, which may result in a heap buffer overflow write. An attacker could exploit this by submitting a crafted HFS+ partition file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the ClamAV scanning process or crash the process, resulting in a denial of service condition.

Recommendations For ClamAV versions 1.0.0 and earlier, update to version 1.0.1 or later. For ClamAV versions 0.105.1 and earlier, update to version 0.105.3 or later. For ClamAV versions 0.103.7 and earlier, update to version 0.103.8 or later. As a temporary workaround, consider restricting access to the HFS+ partition file parser until a patch is available.