Bug 1214347 (CVE-2023-20212) - VUL-0: CVE-2023-20212: clamav: possible denial of service vulnerability in the AutoIt file parser
Summary: VUL-0: CVE-2023-20212: clamav: possible denial of service vulnerability in th...
Status: RESOLVED INVALID
Alias: CVE-2023-20212
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P5 - None : Normal
Target Milestone: ---
Assignee: Reinhard Max
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/375628/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-08-17 06:43 UTC by Alexander Bergmann
Modified: 2023-08-17 07:05 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Bergmann 2023-08-17 06:43:47 UTC 
CVE-2023-20212 

Fixed a possible denial of service vulnerability in the AutoIt file parser. This issue affects versions 1.0.1 and 1.0.0. This issue does not affect version 1.1.0.

References:
https://blog.clamav.net/2023/07/2023-08-16-releases.html
Comment 1 Alexander Bergmann 2023-08-17 07:05:08 UTC 
Not affecting any code-stream:

SUSE:SLE-12:Update/clamav      0.103.8
SUSE:SLE-12-SP5:Update/clamav  0.103.8
SUSE:SLE-15:Update/clamav      0.103.8

openSUSE:Factory/clamav        0.103.8
security/clamav                0.103.9