Search for vulnerabilities
Vulnerability details: VCID-rbst-yfc2-c7hg
Vulnerability ID VCID-rbst-yfc2-c7hg
Aliases CVE-2024-20505
Summary A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an out of bounds read. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. An exploit could allow the attacker to terminate the scanning process.
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-125 Out-of-bounds Read
System Score Found at
epss 0.00418 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00418 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00418 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00418 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00418 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00553 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00553 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00553 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00553 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00553 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00553 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00553 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00553 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00553 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00553 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
epss 0.00553 https://api.first.org/data/v1/epss?cve=CVE-2024-20505
cvssv3.1 4 https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
ssvc Track https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
cvssv3.1 7.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2024-20505
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-20505
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20505
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1080962 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1080962
clamav-141-132-107-and-010312-security.html https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*
cpe:2.3:a:clamav:clamav:1.4.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clamav:clamav:1.4.0:*:*:*:*:*:*:*
CVE-2024-20505 https://nvd.nist.gov/vuln/detail/CVE-2024-20505
USN-7011-1 https://usn.ubuntu.com/7011-1/
USN-7011-2 https://usn.ubuntu.com/7011-2/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-05T13:35:13Z/ Found at https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2024-20505
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.60993
EPSS Score 0.00418
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:46:13.259562+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/7011-1/ 37.0.0