CVE-2020-9399
Medium
Description
The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux.
SeverityMedium
CVSS5.5
Exploit probability—
ProductAvast Antivirus For Linux
PublishedFeb 28, 2020
First seenFeb 28, 2020
How to fix
Update
- avast antivirus_for_linux12.0 or later
- avast antivirus_pro12.0 or later
- avast antivirus_pro_plus12.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avast antivirus_for_linux | v < 12.0 | 12.0 |
| avast antivirus_pro | v < 12.0 | 12.0 |
| avast antivirus_pro_plus | v < 12.0 | 12.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.