[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIdjMlWnwiy0gL-fxxFZaBwZ4dOg0fHi1GD5Wlt3nd88":3,"g5a-risk:CVE-2024-20290":164},{"success":4,"data":5,"meta":161},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":56,"references":57,"referencesCount":77,"weaknesses":78,"weaknessesCount":93,"isActivelyExploited":94,"cisaInfo":26,"otxData":26,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":145,"notableEvents":146},"CVE-2024-20290","What is CVE-2024-20290?","A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources.\r\n\r For a description of this vulnerability, see the ClamAV blog .","A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an a...","2024-02-07T17:15:10.517","2026-06-17T07:06:17.417",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":35},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"psirt@cisco.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],[],0.33323,[36,36,36,36,36,36,36],"High",[40,45,48,53],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"cisco","secure_endpoint","*","cpe:2.3:a:cisco:secure_endpoint:*:*:*:*:*:windows:*:*",{"vendor":41,"product":46,"version":43,"criteria":47,"vulnerable":4},"secure_endpoint_private_cloud","cpe:2.3:a:cisco:secure_endpoint_private_cloud:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"fedoraproject","fedora","38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"39","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",4,[58,63,66,71,73,75],{"url":59,"source":60,"tags":61},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F5FXZYVDNV66RNMNVJOHAJAYRZV4U64CQ\u002F","Fedoraproject",[62],"Mailing List",{"url":64,"source":60,"tags":65},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F6MUDUPAHAAV6FPB2C2QIQCFJ4SHYBOTY\u002F",[62],{"url":67,"source":68,"tags":69},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-clamav-hDffu6t","Cisco",[70],"Vendor Advisory",{"url":59,"source":60,"tags":72},[62],{"url":64,"source":60,"tags":74},[62],{"url":67,"source":68,"tags":76},[70],6,[79,87],{"id":80,"name":81,"description":82,"extendedDescription":83,"status":84,"abstraction":85,"structure":86},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":88,"name":89,"description":90,"extendedDescription":91,"status":84,"abstraction":92,"structure":86},"CWE-126","Buffer Over-read","The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.","This typically occurs when the pointer or its index is incremented to a position beyond the bounds of the buffer or when pointer arithmetic results in a position outside of the valid memory location to name a few. This may result in exposure of sensitive information or possibly a crash.","Variant",2,false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2024-20290? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-20290, a high severity cyber security vulnerability from 2024. High exploit probability (33.3%). A vulnerability in the OL...","CVE-2024-20290, CVE-2024-20290 vulnerability, CVE-2024-20290 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, cisco security, fedoraproject security, secure_endpoint vulnerability, secure_endpoint_private_cloud vulnerability, fedora vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2024-20290",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-20290","Cybersecurity","CVE-2024-20290, CVE-2024-20290 vulnerability, CVE-2024-20290 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122,137],{"Operator":26,"Negate":26,"Nodes":123},[124],{"Operator":125,"Negate":94,"CPEMatch":126},"OR",[127,130,134],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":129,"VersionEndIncluding":26},"107EAB90-71E6-4FF7-BAA5-71F21C4FE683","7.5.17",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":131,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"2EA4AF93-6973-4F23-A173-99701A2FB637","8.0.1.21160","8.2.3.30119",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":136,"VersionEndIncluding":26},"D10B7EE9-96DE-4761-834A-FA5C31326A23","3.8.0",{"Operator":26,"Negate":26,"Nodes":138},[139],{"Operator":125,"Negate":94,"CPEMatch":140},[141,143],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":142,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":144,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",[],[147,154],{"id":148,"eventType":149,"eventTime":150,"details":151,"label":152,"color":153},"d217e0d0-4851-4829-a06e-071fbe94c564","HIGH_EPSS_DELTA","2025-10-18T04:06:06.159272+00:00","Daily EPSS score increased by 0.157 on 2024-02-10","EPSS Score Increased","red",{"id":155,"eventType":156,"eventTime":157,"details":158,"label":159,"color":160},"561ce731-a3a8-4afc-9661-7675b9d93a99","LOW_EPSS_DELTA","2025-11-19T04:04:54.235295+00:00","Daily EPSS score decreased by 0.170 on 2024-02-10","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":162,"version":163},1792244072207,"2.0",{"score":165,"band":166,"action":167,"scoredAt":168},46,"Medium","Plan remediation","2026-10-16T07:00:43.725948+00:00"]