CVE-2020-3350

Medium

Description

A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could occur when scanning malicious files. An attacker with local shell access could exploit this vulnerability by executing a script that could trigger the race condition. A successful exploit could allow the attacker to delete arbitrary files on the system that the attacker would not normally have privileges to delete, producing system instability or causing the endpoint software to stop working.

SeverityMedium
CVSS5.5
Exploit probability—
ProductCisco Clam Antivirus
PublishedJun 18, 2020
First seenJun 18, 2020

How to fix

Affected products

ProductAffected versionsFixed in
cisco clam_antivirusv < 0.102.40.102.4
cisco advanced_malware_protection_for_endpointsv < 1.12.41.12.4
fedoraproject fedora31, 32—
debian debian_linux9.0—
canonical ubuntu_linux12.04, 14.04, 16.04, 18.04, 20.04—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.