CVE-2023-20052

一、漏洞信息
 漏洞编号：[CVE-2023-20052](https://nvd.nist.gov/vuln/detail/CVE-2023-20052)
 漏洞归属组件：[clamav](https://gitee.com/src-openeuler/clamav)
 漏洞归属的版本：0.101.4,0.103.2,0.103.6
 CVSS V3.0分值：
  BaseScore：5.3 Medium
  Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
 漏洞简述：
  On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process.
 漏洞公开时间：2023-03-01 16:15:00
 漏洞创建时间：2023-02-16 17:17:33
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2023-20052
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| nvd | https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-xxe-TcSZduhN |  |
| redhat | https://access.redhat.com/security/cve/CVE-2023-20052 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20052 | https://bugzilla.suse.com/show_bug.cgi?id=1208365 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2023-20052 | https://bugzilla.suse.com/show_bug.cgi?id=1208365 |
| suse_bugzilla | https://exchange.xforce.ibmcloud.com/vulnerabilities/247500 | https://bugzilla.suse.com/show_bug.cgi?id=1208365 |
| suse_bugzilla | https://blog.clamav.net/ | https://bugzilla.suse.com/show_bug.cgi?id=1208365 |
| suse_bugzilla | https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-xxe-TcSZduhN | https://bugzilla.suse.com/show_bug.cgi?id=1208365 |
| redhat_bugzilla | https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-patch.html | https://bugzilla.redhat.com/show_bug.cgi?id=2170764 |
| ubuntu | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20052 | https://ubuntu.com/security/CVE-2023-20052 |
| ubuntu | https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-patch.html | https://ubuntu.com/security/CVE-2023-20052 |
| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2023-20052 | https://ubuntu.com/security/CVE-2023-20052 |
| ubuntu | https://launchpad.net/bugs/cve/CVE-2023-20052 | https://ubuntu.com/security/CVE-2023-20052 |
| ubuntu | https://security-tracker.debian.org/tracker/CVE-2023-20052 | https://ubuntu.com/security/CVE-2023-20052 |
| debian |  | https://security-tracker.debian.org/tracker/CVE-2023-20052 |
| cve_search |  | https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-xxe-TcSZduhN |
| mageia |  | http://advisories.mageia.org/MGASA-2023-0068.html |
| nvd | https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-xxe-TcSZduhN |  |
|  | https://blog.clamav.net/2023/ |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>

二、漏洞分析结构反馈
 影响性分析说明：
    2023 年 2 月 15 日，ClamAV 扫描库中的以下漏洞被披露:ClamAV 1.0.0 及更早版本、0.105.1 及更早版本和 0.103.7 及更早版本的 DMG 文件解析器中的漏洞可能允许未经身份验证的、远程攻击者访问受影响设备上的敏感信息。此漏洞是由于启用可能导致 XML 外部实体注入的 XML 实体替换。攻击者可以通过提交精心制作的 DMG 文件以供受影响设备上的 ClamAV 扫描来利用此漏洞。成功的利用可能允许攻击者从 ClamAV 扫描进程可能读取的任何文件中泄漏字节。 
 openEuler评分：
  5.3
 Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
 受影响版本排查(受影响/不受影响)：
  1.openEuler-20.03-LTS-SP1(0.103.2):受影响
2.openEuler-20.03-LTS-SP3(0.103.8):受影响
3.openEuler-22.03-LTS(0.103.8):受影响
4.openEuler-22.03-LTS-SP1(0.103.8):受影响

修复是否涉及abi变化(是/否)：
  1.openEuler-20.03-LTS-SP1(0.103.2):否
2.openEuler-20.03-LTS-SP3(0.103.8):否
3.openEuler-22.03-LTS(0.103.8):否
4.openEuler-22.03-LTS-SP1(0.103.8):否

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2023-1169

src-openEuler/clamav

Content Risk Flag

Comments (8)

src-openEuler/clamav .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2023-20052

Comments (8)

Search

src-openEuler/clamav