CVE catalog

CVE-2023-20197

clamav: CVE-2023-20197

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.17% · Oct 25, 2026

A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is decompressed, which may result in a loop condition that could cause the affected software to stop responding. An attacker could exploit this vulnerability by submitting a crafted HFS+ filesystem image to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to stop responding, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianclamavsid1.4.6+dfsg-1fixed
Debianclamavforky1.4.6+dfsg-1fixed
Debianclamavtrixie1.4.3+dfsg-1fixed
Debianclamavbookworm1.4.3+dfsg-1~deb12u2fixed
Debianclamavbookworm-security1.4.6+dfsg-0+deb12u1fixed
Ubuntuclamavpro0.99.2+dfsg-6ubuntu2vulnerable
Ubuntuclamavpro0.99.3~beta1+dfsg-2ubuntu1vulnerable
Ubuntuclamavpro0.99.3~beta1+dfsg-2ubuntu2vulnerable
Ubuntuclamavpro0.99.3+addedllvm-0ubuntu1vulnerable
Ubuntuclamavpro0.99.3+addedllvm-0ubuntu2vulnerable
Ubuntuclamavpro0.99.4+addedllvm-0ubuntu1vulnerable
Ubuntuclamavpro0.100.1+dfsg-1ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.100.1+dfsg-1ubuntu0.18.04.2vulnerable
Ubuntuclamavpro0.100.1+dfsg-1ubuntu0.18.04.3vulnerable
Ubuntuclamavpro0.100.2+dfsg-1ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.100.3+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.101.4+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.102.1+dfsg-0ubuntu0.18.04.2vulnerable
Ubuntuclamavpro0.102.2+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.102.3+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.102.4+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.103.2+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.103.2+dfsg-0ubuntu0.18.04.2vulnerable
Ubuntuclamavpro0.103.2+dfsg-0ubuntu0.18.04.3vulnerable
Ubuntuclamavpro0.103.5+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.103.6+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.103.8+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.103.9+dfsg-0ubuntu0.18.04.1+esm1fixed
Ubuntuclamavpro0.99.2+dfsg-6ubuntu2vulnerable
Ubuntuclamavpro0.99.3~beta1+dfsg-2ubuntu1vulnerable
Ubuntuclamavpro0.99.3~beta1+dfsg-2ubuntu2vulnerable
Ubuntuclamavpro0.99.3+addedllvm-0ubuntu1vulnerable
Ubuntuclamavpro0.99.3+addedllvm-0ubuntu2vulnerable
Ubuntuclamavpro0.99.4+addedllvm-0ubuntu1vulnerable
Ubuntuclamavpro0.100.1+dfsg-1ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.100.1+dfsg-1ubuntu0.18.04.2vulnerable
Ubuntuclamavpro0.100.1+dfsg-1ubuntu0.18.04.3vulnerable
Ubuntuclamavpro0.100.2+dfsg-1ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.100.3+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.101.4+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.102.1+dfsg-0ubuntu0.18.04.2vulnerable
Ubuntuclamavpro0.102.2+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.102.3+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.102.4+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.103.2+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.103.2+dfsg-0ubuntu0.18.04.2vulnerable
Ubuntuclamavpro0.103.2+dfsg-0ubuntu0.18.04.3vulnerable
Ubuntuclamavpro0.103.5+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.103.6+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.103.8+dfsg-0ubuntu0.18.04.1vulnerable
Ubuntuclamavpro0.103.9+dfsg-0ubuntu0.18.04.1+esm1fixed
Ubuntuclamav20.040.101.4+dfsg-1ubuntu1vulnerable
Ubuntuclamav20.040.102.1+dfsg-1ubuntu1vulnerable
Ubuntuclamav20.040.102.1+dfsg-2ubuntu1vulnerable
Ubuntuclamav20.040.102.1+dfsg-2ubuntu2vulnerable
Ubuntuclamav20.040.102.2+dfsg-1ubuntu1vulnerable
Ubuntuclamav20.040.102.2+dfsg-2ubuntu1vulnerable
Ubuntuclamav20.040.102.3+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntuclamav20.040.102.4+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntuclamav20.040.103.2+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntuclamav20.040.103.2+dfsg-0ubuntu0.20.04.2vulnerable
Ubuntuclamav20.040.103.5+dfsg-1~20.04.1vulnerable
Ubuntuclamav20.040.103.6+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntuclamav20.040.103.8+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntuclamav20.040.103.9+dfsg-0ubuntu0.20.04.1fixed
Ubuntuclamav22.040.103.3+dfsg-1vulnerable
Ubuntuclamav22.040.103.4+dfsg-1vulnerable
Ubuntuclamav22.040.103.4+dfsg-1build1vulnerable
Ubuntuclamav22.040.103.5+dfsg-1vulnerable
Ubuntuclamav22.040.103.6+dfsg-0ubuntu0.22.04.1vulnerable
Ubuntuclamav22.040.103.8+dfsg-0ubuntu0.22.04.1vulnerable
Ubuntuclamav22.040.103.9+dfsg-0ubuntu0.22.04.1fixed
Ubuntuclamav20.040.101.4+dfsg-1ubuntu1vulnerable
Ubuntuclamav20.040.102.1+dfsg-1ubuntu1vulnerable
Ubuntuclamav20.040.102.1+dfsg-2ubuntu1vulnerable
Ubuntuclamav20.040.102.1+dfsg-2ubuntu2vulnerable
Ubuntuclamav20.040.102.2+dfsg-1ubuntu1vulnerable
Ubuntuclamav20.040.102.2+dfsg-2ubuntu1vulnerable
Ubuntuclamav20.040.102.3+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntuclamav20.040.102.4+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntuclamav20.040.103.2+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntuclamav20.040.103.2+dfsg-0ubuntu0.20.04.2vulnerable
Ubuntuclamav20.040.103.5+dfsg-1~20.04.1vulnerable
Ubuntuclamav20.040.103.6+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntuclamav20.040.103.8+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntuclamav20.040.103.9+dfsg-0ubuntu0.20.04.1fixed
Ubuntuclamav22.040.103.3+dfsg-1vulnerable
Ubuntuclamav22.040.103.4+dfsg-1vulnerable
Ubuntuclamav22.040.103.4+dfsg-1build1vulnerable
Ubuntuclamav22.040.103.5+dfsg-1vulnerable
Ubuntuclamav22.040.103.6+dfsg-0ubuntu0.22.04.1vulnerable
Ubuntuclamav22.040.103.8+dfsg-0ubuntu0.22.04.1vulnerable
Ubuntuclamav22.040.103.9+dfsg-0ubuntu0.22.04.1fixed
Suseclamavlinux enterprise module for basesystem 15 sp40.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise module for basesystem 15 sp50.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise high performance computing 15 sp1-ltss0.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise high performance computing 15 sp2-ltss0.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise high performance computing 15 sp3-espos0.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise high performance computing 15 sp3-ltss0.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise server 15 sp1-ltss0.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise server 15 sp2-ltss0.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise server 15 sp3-ltss0.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise server for sap applications 15 sp10.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise server for sap applications 15 sp20.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise server for sap applications 15 sp30.103.9-150000.3.47.1fixed
Suseclamavmanager proxy 4.20.103.9-150000.3.47.1fixed
Suseclamavmanager server 4.20.103.9-150000.3.47.1fixed
Suseclamaventerprise storage 70.103.9-150000.3.47.1fixed
Suseclamaventerprise storage 7.10.103.9-150000.3.47.1fixed
Opensuseclamavleap 15.40.103.9-150000.3.47.1fixed
Opensuseclamavleap 15.50.103.9-150000.3.47.1fixed
Suseclamavlinux enterprise server 12 sp50.103.9-3.27.1fixed
Suseclamavlinux enterprise server for sap applications 12 sp50.103.9-3.27.1fixed
Opensuseclamavtumbleweed0.103.9-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianclamavsourcesid1.0.2+dfsg-1not yet assignedNot reported[1050057]
Debianclamavsourceforky1.0.2+dfsg-1not yet assignedNot reported[1050057]
Debianclamavsourcetrixie1.0.2+dfsg-1not yet assignedNot reported[1050057]
Debianclamavsourcebookworm1.0.2+dfsg-1~deb12u1not yet assignedNot reported[1050057]
Ubuntuclamavdebpro0.103.9+dfsg-0ubuntu0.18.04.1+esm1Not reportedUSN-6303-2Not reported
Ubuntuclamavdebpro0.103.9+dfsg-0ubuntu0.18.04.1+esm1Not reportedUBUNTU-CVE-2023-20197Not reported
Ubuntuclamavdeb20.040.103.9+dfsg-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2023-20197Not reported
Ubuntuclamavdeb22.040.103.9+dfsg-0ubuntu0.22.04.1Not reportedUBUNTU-CVE-2023-20197Not reported
Ubuntuclamavdeb20.040.103.9+dfsg-0ubuntu0.20.04.1Not reportedUSN-6303-1Not reported
Ubuntuclamavdeb22.040.103.9+dfsg-0ubuntu0.22.04.1Not reportedUSN-6303-1Not reported
Suseclamavrpmlinux enterprise module for basesystem 15 sp40.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise module for basesystem 15 sp50.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise high performance computing 15 sp1-ltss0.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise high performance computing 15 sp2-ltss0.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise high performance computing 15 sp3-espos0.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise high performance computing 15 sp3-ltss0.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise server 15 sp1-ltss0.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise server 15 sp2-ltss0.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise server 15 sp3-ltss0.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise server for sap applications 15 sp10.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise server for sap applications 15 sp20.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise server for sap applications 15 sp30.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmmanager proxy 4.20.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmmanager server 4.20.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmenterprise storage 70.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmenterprise storage 7.10.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Opensuseclamavrpmleap 15.40.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Opensuseclamavrpmleap 15.50.103.9-150000.3.47.1Not reportedSUSE-SU-2023:3456-1Not reported
Suseclamavrpmlinux enterprise server 12 sp50.103.9-3.27.1Not reportedSUSE-SU-2023:3435-1Not reported
Suseclamavrpmlinux enterprise server for sap applications 12 sp50.103.9-3.27.1Not reportedSUSE-SU-2023:3435-1Not reported
Opensuseclamavrpmtumbleweed0.103.9-1.1Not reportedOPENSUSE-SU-2024:13174-1Not reported

[Debian bug #1050057]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]