Search for vulnerabilities
Vulnerability details: VCID-fytj-r2gu-k3fm
Vulnerability ID VCID-fytj-r2gu-k3fm
Aliases CVE-2023-20052
Summary On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process.
Status Published
Exploitability 0.5
Weighted Severity 4.8
Risk 2.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
System Score Found at
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
epss 0.07267 https://api.first.org/data/v1/epss?cve=CVE-2023-20052
cvssv3.1 5.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 5.3 https://nvd.nist.gov/vuln/detail/CVE-2023-20052
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-20052
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20052
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-xxe-TcSZduhN
1031509 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031509
cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:linux:*:*
cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:macos:*:*
cpe:2.3:a:cisco:secure_endpoint_private_cloud:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cisco:secure_endpoint_private_cloud:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*
cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*
cpe:2.3:a:clamav:clamav:1.0.0:-:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clamav:clamav:1.0.0:-:*:*:*:*:*:*
cpe:2.3:a:clamav:clamav:1.0.0:rc:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clamav:clamav:1.0.0:rc:*:*:*:*:*:*
cpe:2.3:a:clamav:clamav:1.0.0:rc2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clamav:clamav:1.0.0:rc2:*:*:*:*:*:*
cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*
CVE-2023-20052 https://nvd.nist.gov/vuln/detail/CVE-2023-20052
USN-5887-1 https://usn.ubuntu.com/5887-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2023-20052
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.91244
EPSS Score 0.07267
Published At Aug. 8, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:38:27.352706+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/5887-1/ 37.0.0