English version →
このページは Debian 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。 CVE-2026-20345 の詳細 →
カテゴリ
DEBIAN-CVE-2026-20345

A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other exp...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper handling of an endian conversion operation, which may result in an out-of-bounds buffer write. An attacker could exploit this vulnerability by submitting a crafted GPT file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 clamav
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13 clamav
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14 clamav
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.6+dfsg-1"}]}]

参照URL

当サイトでは、アクセス解析と広告の効果測定のために Cookie を使います。株式会社Game のサイト共通の設定です。 詳しく