CVE-2020-3327

A vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a heap buffer overflow read. An attacker could exploit this vulnerability by sending a crafted ARJ file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.

• CWE-20
• CWE-20

• https://blog.clamav.net/2020/05/clamav-01023-security-patch-released.htmlVendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/05/msg00018.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/08/msg00010.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BMTC7I5LGY4FCIZLHPNC4WWC6VNLFER/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IJ67VH37NCG25PICGWFWZHSVG7PBT7MC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5YWYT27SBTV4RZSGFHIQUI4LQVFASWS/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QM7EXJHDEZJLWM2NKH6TCDXOBP5NNYIN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ROBJOGJOT44MVDX7RQEACYHQN4LYW5RK/
• https://security.gentoo.org/glsa/202007-23Third Party Advisory
• https://usn.ubuntu.com/4370-1/Third Party Advisory
• https://usn.ubuntu.com/4370-2/Third Party Advisory
• https://usn.ubuntu.com/4435-1/Third Party Advisory
• https://usn.ubuntu.com/4435-2/Third Party Advisory
• https://blog.clamav.net/2020/05/clamav-01023-security-patch-released.htmlVendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/05/msg00018.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/08/msg00010.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3BMTC7I5LGY4FCIZLHPNC4WWC6VNLFER/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IJ67VH37NCG25PICGWFWZHSVG7PBT7MC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5YWYT27SBTV4RZSGFHIQUI4LQVFASWS/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QM7EXJHDEZJLWM2NKH6TCDXOBP5NNYIN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ROBJOGJOT44MVDX7RQEACYHQN4LYW5RK/
• https://security.gentoo.org/glsa/202007-23Third Party Advisory
• https://usn.ubuntu.com/4370-1/Third Party Advisory
• https://usn.ubuntu.com/4370-2/Third Party Advisory
• https://usn.ubuntu.com/4435-1/Third Party Advisory
• https://usn.ubuntu.com/4435-2/Third Party Advisory

Published

May 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3318Multiple vulnerabilities in Cisco Firepower Management Cente…9.8
• CVE-2020-3319A vulnerability in Cisco Webex Network Recording Player and …3.3
• CVE-2020-3320A vulnerability in the web-based management interface of Cis…5.4
• CVE-2020-3321A vulnerability in Cisco Webex Network Recording Player and …3.3
• CVE-2020-3322A vulnerability in Cisco Webex Network Recording Player and …3.3
• CVE-2020-3323A vulnerability in the web-based management interface of Cis…9.8
• CVE-2020-3329A vulnerability in role-based access control of Cisco Integr…4.3
• CVE-2020-3330A vulnerability in the Telnet service of Cisco Small Busines…9.8
• CVE-2020-3331A vulnerability in the web-based management interface of Cis…9.8
• CVE-2020-3332A vulnerability in the web-based management interface of Cis…8.8
• CVE-2020-3333A vulnerability in the API of Cisco Application Services Eng…5.3
• CVE-2020-3334A vulnerability in the ARP packet processing of Cisco Adapti…7.4