CVE-2025-20234 - log back

CVE-2025-20234 edited at 21 Jun 2025 01:04:31
Remote
- Unknown
+ Remote
Type
- Unknown
+ Denial of service
CVE-2025-20234 created at 21 Jun 2025 01:03:28
Severity
+ Medium
Remote
+ Unknown
Type
+ Unknown
Description
+ A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability by submitting a crafted file containing UDF content to be scanned by ClamAV on an affected device.
References
+ https://blog.clamav.net/2025/06/clamav-143-and-109-security-patch.html
+ https://nvd.nist.gov/vuln/detail/CVE-2025-20234
Notes