CVE:CVE-2023-20032
CNNVD:CNNVD-202302-1351
ClamAV（Clam AntiVirus）是ClamAV团队的一套免费且开源的杀毒软件。该软件用于检测木马、病毒、恶意软件和其他恶意威胁。
ClamAV存在安全漏洞，该漏洞源于缺少缓冲区大小检查，可能导致堆缓冲区溢出写入，未经身份验证的远程攻击者利用该漏洞可以执行任意代码。
solution:Upgrade cisco secure_endpoint to a higher version than 1.20.2,1.21.1,7.5.9,8.1.5,and avoid the version (,1.20.2),(,1.21.1),(,7.5.9),[8.0.1.21160,8.1.5); Upgrade cisco secure_endpoint_private_cloud to a higher version than 3.6.0,and avoid the version (,3.6.0); Upgrade cisco web_security_appliance to a higher version than 12.5.6,14.0.4-005,14.5.1-013,15.0.0-254,and avoid the version (,12.5.6),[14.0.0,14.0.4-005),[14.5.0,14.5.1-013),[15.0.0,15.0.0-254); Upgrade clamav clamav to a higher version than 0.103.7,0.105.1,1.0.0,1.0.0:rc,1.0.0:rc2,and avoid the version (,0.103.7],[0.104.0,0.105.1],1.0.0,1.0.0:rc,1.0.0:rc2; Upgrade stormshield stormshield_network_security to a higher version than 3.7.35,3.11.23,4.3.17,4.6.4,and avoid the version [3.0.0,3.7.35),[3.8.0,3.11.23),[4.3.0,4.3.17),[4.4.0,4.6.4)