release of the free antivirus package , which fixes three :
- — unauthorized local attackers to delete or move arbitrary files in the system, for example, it is possible to delete /etc/passwd without the necessary permissions. The vulnerability is caused by a race condition that occurs during the scanning of malicious files, allowing a user with shell access to the system to substitute the target scanning directory with a symbolic link pointing to another path.
For example, an attacker can create a directory '/home/user/exploit/' and upload a file with a test virus signature, naming that file 'passwd'. After starting the virus scanning program, but before removing the problematic file, one can replace the 'exploit' directory with a symbolic link pointing to the '/etc' directory, which will lead to the antivirus deleting the file /etc/passwd. The vulnerability manifests only when using clamscan, clamdscan, and clamonacc with the '--move' or '--remove' option.
- CVE-2020-3327, CVE-2020-3481 — vulnerabilities in the modules for parsing archives in ARJ and EGG formats, allowing denial of service through the submission of specially crafted archives, the processing of which leads to crashing the scanning process.
Source: opennet.ru
