SUSE-SU-2024:3305-1: clamav&distro=openSUSE Leap 15.5
CVSS: UnknownPublished
Published 18-09-2024Last modified 04-02-2026
Vulnerability summary
SUSE-SU-2024:3305-1 is a vulnerability in clamav&distro=openSUSE Leap 15.5 with no CVSS score yet.
CVSS score
Not scored
010
No CVSS score recordedEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 18-09-2024PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for clamav This update for clamav fixes the following issues: - Update to version 0.103.12 - CVE-2024-20506: Disable symlinks following to prevent an attacker to corrupt system files. (bsc#1230162) - CVE-2024-20505: Fixed possible out-of-bounds read bug in the PDF file parser. (bsc#1230161)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse14 products
- clamav&distro=SUSE Enterprise Storage 7.1< 0.103.12-150000.3.53.1
- clamav&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 0.103.12-150000.3.53.1
- clamav&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 0.103.12-150000.3.53.1
- clamav&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 0.103.12-150000.3.53.1
- clamav&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 0.103.12-150000.3.53.1
Opensuse1 product
- clamav&distro=openSUSE Leap 15.5< 0.103.12-150000.3.53.1
2 vendors · 15 products