Amazon Linux AMI: CVE-2023-20052: Security patch for clamav (ALAS-2023-1694)

Amazon Linux AMI: CVE-2023-20052: Security patch for clamav (ALAS-2023-1694)

Severity

5

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

02/15/2023

Created

02/24/2023

Added

02/23/2023

Modified

01/28/2025

Description

Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.

From ALAS-2023-1694:

Possible remote code execution vulnerability in the ClamAV HFS+ file parser. The issue affects ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (CVE-2023-20032)

A possible remote information leak vulnerability in the DMG file parser. The issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. (CVE-2023-20052)

Solution(s)

• amazon-linux-upgrade-clamav

References

• ALAS-2023-1694
• CVE-2023-20052