CVE-2020-3481

A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a null pointer dereference. An attacker could exploit this vulnerability by sending a crafted EGG file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.

• CWE-476
• CWE-476

• https://blog.clamav.net/2020/07/clamav-01024-security-patch-released.htmlVendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/08/msg00010.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IJ67VH37NCG25PICGWFWZHSVG7PBT7MC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QM7EXJHDEZJLWM2NKH6TCDXOBP5NNYIN/
• https://security.gentoo.org/glsa/202007-23Third Party Advisory
• https://usn.ubuntu.com/4435-1/Third Party Advisory
• https://usn.ubuntu.com/4435-2/Third Party Advisory
• https://blog.clamav.net/2020/07/clamav-01024-security-patch-released.htmlVendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/08/msg00010.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IJ67VH37NCG25PICGWFWZHSVG7PBT7MC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QM7EXJHDEZJLWM2NKH6TCDXOBP5NNYIN/
• https://security.gentoo.org/glsa/202007-23Third Party Advisory
• https://usn.ubuntu.com/4435-1/Third Party Advisory
• https://usn.ubuntu.com/4435-2/Third Party Advisory

Published

Jul 20, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3475Multiple vulnerabilities in the web management framework of …8.1
• CVE-2020-3476A vulnerability in the CLI implementation of a specific comm…6
• CVE-2020-3477A vulnerability in the CLI parser of Cisco IOS Software and …5.5
• CVE-2020-3478A vulnerability in the REST API of Cisco Enterprise NFV Infr…8.1
• CVE-2020-3479A vulnerability in the implementation of Multiprotocol Borde…7.5
• CVE-2020-3480Multiple vulnerabilities in the Zone-Based Firewall feature …8.6
• CVE-2020-3482A vulnerability in the Traversal Using Relays around NAT (TU…6.5
• CVE-2020-3483Duo has identified and fixed an issue with the Duo Network G…6.3
• CVE-2020-3484A vulnerability in the web-based management interface of Cis…5.3
• CVE-2020-3485A vulnerability in the role-based access control (RBAC) func…6.3
• CVE-2020-3486Multiple vulnerabilities in the Control and Provisioning of …6.5
• CVE-2020-3487Multiple vulnerabilities in the Control and Provisioning of …6.5