OSV-2023-350

    Dashboard / Vulnerabilities / OSV-2023-350

    OSV-2023-350

    Published: 29 Apr 2023Last Modified: 30 Apr 2023

    Summary: UNKNOWN READ in cli_html_normalise

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58398 ``` Crash type: UNKNOWN READ Crash state: cli_html_normalise html_normalise_map cli_scanhtml ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58398

    Affected packages

    Package

    Name: clamav

    Purl: pkg:generic/clamav

    Affected ranges

    Type: GIT

    Events:

    Introduced- 60d9465a7371031c66a19b05e0697ae8a77269fe
    Fixed -7a6fe78172c86144aed3cfa4d20683f5b8fb51c9

    Affected versions

    clamav-1.1.0-rc

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-350 | CVE-DB