CVE-2020-3481: Clam AntiVirus (ClamAV) Software Null Pointer Dereference Vulnerability

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-07-20 · updated 2026-06-17
Weakness: CWE-476

Description

A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a null pointer dereference. An attacker could exploit this vulnerability by sending a crafted EGG file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.

Affected products

Canonical Ubuntu Linux: 12.04, 14.04, 16.04, 18.04, 20.04
Cisco ClamAV: from 0.102.0 through 0.102.3
Debian Linux: 9.0
Fedoraproject Fedora: 31, 32

References

Get alerted when CVE-2020-3481 or the next vulnerability affects your stack