CVE catalog

CVE-2020-3350

clamav: CVE-2020-3350

[CVE catalog]

Severity
Medium · CVSS 6.3CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.26% · Oct 25, 2026

A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could occur when scanning malicious files. An attacker with local shell access could exploit this vulnerability by executing a script that could trigger the race condition. A successful exploit could allow the attacker to delete arbitrary files on the system that the attacker would not normally have privileges to delete, producing system instability or causing the endpoint software to stop working.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianclamavsid1.4.6+dfsg-1fixed
Debianclamavforky1.4.6+dfsg-1fixed
Debianclamavtrixie1.4.3+dfsg-1fixed
Debianclamavbookworm1.4.3+dfsg-1~deb12u2fixed
Debianclamavbookworm-security1.4.6+dfsg-0+deb12u1fixed
Alpineclamav3.110.102.4-r0fixed
Alpineclamav3.120.102.4-r0fixed
Alpineclamav3.130.102.4-r0fixed
Ubuntuclamavpro0.97.8+dfsg-1ubuntu4vulnerable
Ubuntuclamavpro0.97.8+dfsg-1ubuntu5vulnerable
Ubuntuclamavpro0.98.1+dfsg-1ubuntu4vulnerable
Ubuntuclamavpro0.98.1+dfsg-1ubuntu5vulnerable
Ubuntuclamavpro0.98.1+dfsg-2ubuntu2vulnerable
Ubuntuclamavpro0.98.1+dfsg-4ubuntu1vulnerable
Ubuntuclamavpro0.98.1+dfsg-4ubuntu1.1vulnerable
Ubuntuclamavpro0.98.5+addedllvm-0ubuntu0.14.04.1vulnerable
Ubuntuclamavpro0.98.6+dfsg-0ubuntu0.14.04.1vulnerable
Ubuntuclamavpro0.98.7+dfsg-0ubuntu0.14.04.1vulnerable
Ubuntuclamavpro0.99.2+addedllvm-0ubuntu0.14.04.1vulnerable
Ubuntuclamavpro0.99.2+addedllvm-0ubuntu0.14.04.2vulnerable
Ubuntuclamavpro0.99.3+addedllvm-0ubuntu0.14.04.1vulnerable
Ubuntuclamavpro0.99.4+addedllvm-0ubuntu0.14.04.1vulnerable
Ubuntuclamavpro0.100.1+dfsg-1ubuntu0.14.04.1vulnerable
Ubuntuclamavpro0.100.1+dfsg-1ubuntu0.14.04.2vulnerable
Ubuntuclamavpro0.100.1+dfsg-1ubuntu0.14.04.3vulnerable
Ubuntuclamavpro0.100.1+dfsg-1ubuntu0.14.04.4vulnerable
Ubuntuclamavpro0.100.2+dfsg-1ubuntu0.14.04.1vulnerable
Ubuntuclamavpro0.100.2+dfsg-1ubuntu0.14.04.2vulnerable
Ubuntuclamavpro0.100.3+dfsg-0ubuntu0.14.04.1vulnerable
Ubuntuclamavpro0.100.3+dfsg-0ubuntu0.14.04.1+esm1vulnerable
Ubuntuclamavpro0.101.4+dfsg-0ubuntu0.14.04.1+esm1vulnerable
Ubuntuclamavpro0.102.1+dfsg-0ubuntu0.14.04.1+esm1vulnerable
Ubuntuclamavpro0.102.2+dfsg-0ubuntu0.14.04.1+esm1vulnerable
Ubuntuclamavpro0.102.3+dfsg-0ubuntu0.14.04.1+esm1vulnerable
Ubuntuclamavpro0.102.4+dfsg-0ubuntu0.14.04.1+esm1fixed
Ubuntuclamav16.040.98.7+dfsg-0ubuntu4vulnerable
Ubuntuclamav16.040.98.7+dfsg-0ubuntu5vulnerable
Ubuntuclamav16.040.99+dfsg-1ubuntu1vulnerable
Ubuntuclamav16.040.99+dfsg-1ubuntu1.1vulnerable
Ubuntuclamav16.040.99+dfsg-1ubuntu1.2vulnerable
Ubuntuclamav16.040.99.2+dfsg-0ubuntu0.16.04.1vulnerable
Ubuntuclamav16.040.99.2+dfsg-0ubuntu0.16.04.2vulnerable
Ubuntuclamav16.040.99.2+dfsg-0ubuntu0.16.04.3vulnerable
Ubuntuclamav16.040.99.3+addedllvm-0ubuntu0.16.04.1vulnerable
Ubuntuclamav16.040.99.4+addedllvm-0ubuntu0.16.04.1vulnerable
Ubuntuclamav16.040.100.1+dfsg-1ubuntu0.16.04.1vulnerable
Ubuntuclamav16.040.100.1+dfsg-1ubuntu0.16.04.2vulnerable
Ubuntuclamav16.040.100.1+dfsg-1ubuntu0.16.04.3vulnerable
Ubuntuclamav16.040.100.2+dfsg-1ubuntu0.16.04.1vulnerable
Ubuntuclamav16.040.100.3+dfsg-0ubuntu0.16.04.1vulnerable
Ubuntuclamav16.040.101.4+dfsg-0ubuntu0.16.04.1vulnerable
Ubuntuclamav16.040.102.1+dfsg-0ubuntu0.16.04.2vulnerable
Ubuntuclamav16.040.102.2+dfsg-0ubuntu0.16.04.1vulnerable
Ubuntuclamav16.040.102.3+dfsg-0ubuntu0.16.04.1vulnerable
Ubuntuclamav16.040.102.4+dfsg-0ubuntu0.16.04.1fixed
Ubuntuclamav18.040.99.2+dfsg-6ubuntu2vulnerable
Ubuntuclamav18.040.99.3~beta1+dfsg-2ubuntu1vulnerable
Ubuntuclamav18.040.99.3~beta1+dfsg-2ubuntu2vulnerable
Ubuntuclamav18.040.99.3+addedllvm-0ubuntu1vulnerable
Ubuntuclamav18.040.99.3+addedllvm-0ubuntu2vulnerable
Ubuntuclamav18.040.99.4+addedllvm-0ubuntu1vulnerable
Ubuntuclamav18.040.100.1+dfsg-1ubuntu0.18.04.1vulnerable
Ubuntuclamav18.040.100.1+dfsg-1ubuntu0.18.04.2vulnerable
Ubuntuclamav18.040.100.1+dfsg-1ubuntu0.18.04.3vulnerable
Ubuntuclamav18.040.100.2+dfsg-1ubuntu0.18.04.1vulnerable
Ubuntuclamav18.040.100.3+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamav18.040.101.4+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamav18.040.102.1+dfsg-0ubuntu0.18.04.2vulnerable
Ubuntuclamav18.040.102.2+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamav18.040.102.3+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamav18.040.102.4+dfsg-0ubuntu0.18.04.1fixed
Ubuntuclamav20.040.101.4+dfsg-1ubuntu1vulnerable
Ubuntuclamav20.040.102.1+dfsg-1ubuntu1vulnerable
Ubuntuclamav20.040.102.1+dfsg-2ubuntu1vulnerable
Ubuntuclamav20.040.102.1+dfsg-2ubuntu2vulnerable
Ubuntuclamav20.040.102.2+dfsg-1ubuntu1vulnerable
Ubuntuclamav20.040.102.2+dfsg-2ubuntu1vulnerable
Ubuntuclamav20.040.102.3+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntuclamav20.040.102.4+dfsg-0ubuntu0.20.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianclamavsourcesid0.102.4+dfsg-1not yet assignedNot reportedNot reported
Debianclamavsourceforky0.102.4+dfsg-1not yet assignedNot reportedNot reported
Debianclamavsourcetrixie0.102.4+dfsg-1not yet assignedNot reportedNot reported
Debianclamavsourcebookworm0.102.4+dfsg-1not yet assignedNot reportedNot reported
Alpineclamavapk3.110.102.4-r0Not reportedALPINE-CVE-2020-3350Not reported
Alpineclamavapk3.120.102.4-r0Not reportedALPINE-CVE-2020-3350Not reported
Alpineclamavapk3.130.102.4-r0Not reportedALPINE-CVE-2020-3350Not reported
Ubuntuclamavdebpro0.102.4+dfsg-0ubuntu0.14.04.1+esm1Not reportedUBUNTU-CVE-2020-3350Not reported
Ubuntuclamavdeb16.040.102.4+dfsg-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2020-3350Not reported
Ubuntuclamavdeb18.040.102.4+dfsg-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2020-3350Not reported
Ubuntuclamavdeb20.040.102.4+dfsg-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2020-3350Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [clamav]Fixed
    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-base]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-daemon]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-doc]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-docs]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-freshclam]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-milter]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamav-testfiles]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · all · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [clamdscan]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [libclamav12]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

  • [libclamav-dev]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

    • 1.4.3+dfsg-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · bookworm; dsa · clamav · debian · 12

[Debian 13 (Trixie)]

  • [clamav]Fixed
    Details (2)

    • 1.4.3+dfsg-1 · amd64 · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · arm64 · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-base]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-daemon]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · amd64 · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · arm64 · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-doc]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-docs]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-freshclam]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · amd64 · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · arm64 · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-milter]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · amd64 · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · arm64 · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

  • [clamav-testfiles]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · all · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

  • [clamdscan]Fixed

    Source package: [clamav]

    Details (2)

    • 1.4.3+dfsg-1 · amd64 · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

    • 1.4.3+dfsg-1 · arm64 · trixie

      Fixed · Fixed: 0.102.4+dfsg-1

      dsa · clamav · debian · 13

Next results

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]