CVE-2019-1785 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-1785 Interim 1 54 2026-03-05T06:31:12Z current 2021-05-30T14:21:13Z 2026-03-05T06:31:12Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-1785 A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper error-handling mechanisms when processing nested RAR files sent to an affected device. An attacker could exploit this vulnerability by sending a crafted RAR file to an affected device. An exploit could allow the attacker to view or create arbitrary files on the targeted system. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-December/008064.html E-Mail link for SUSE-SU-2020:3790-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GAR55SQV75RXSJVDKQWD4CZNKDOYFY5P/ E-Mail link for openSUSE-SU-2020:2268-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DHFME6EFDMW6BQBIYMTU3MBXQLVR7QTK/ E-Mail link for openSUSE-SU-2020:2276-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES for SAP Applications 11 SP3 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.1 openSUSE Leap 15.2 openSUSE Tumbleweed clamav clamav-0.103.0-3.23.1 clamav-0.103.0-lp151.2.12.1 clamav-0.103.0-lp152.6.3.1 clamav-0.103.11-150600.16.7 clamav-0.103.3-1.4 clamav-1.4.2-150600.18.9.3 clamav-1.4.3-160000.2.2 clamav-devel clamav-devel-0.103.0-3.23.1 clamav-devel-0.103.0-lp151.2.12.1 clamav-devel-0.103.0-lp152.6.3.1 clamav-devel-0.103.11-150600.16.7 clamav-devel-0.103.3-1.4 clamav-devel-1.4.2-150600.18.9.3 clamav-devel-1.4.3-160000.2.2 clamav-docs-html-1.4.2-150600.18.9.3 clamav-docs-html-1.4.3-160000.2.2 clamav-milter-0.103.3-1.4 clamav-milter-1.4.2-150600.18.9.3 clamav-milter-1.4.3-160000.2.2 libclamav12-1.4.2-150600.18.9.3 libclamav12-1.4.3-160000.2.2 libclamav7 libclamav9 libclamav9-0.103.0-3.23.1 libclamav9-0.103.0-lp151.2.12.1 libclamav9-0.103.0-lp152.6.3.1 libclamav9-0.103.11-150600.16.7 libclamav9-0.103.3-1.4 libclammspack0 libclammspack0-1.4.2-150600.18.9.3 libclammspack0-1.4.3-160000.2.2 libfreshclam2 libfreshclam2-0.103.0-3.23.1 libfreshclam2-0.103.0-lp151.2.12.1 libfreshclam2-0.103.0-lp152.6.3.1 libfreshclam2-0.103.11-150600.16.7 libfreshclam2-0.103.3-1.4 libfreshclam3-1.4.2-150600.18.9.3 libfreshclam3-1.4.3-160000.2.2 clamav-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 clamav-devel-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libclamav9-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 libfreshclam2-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 clamav-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 clamav-devel-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libclamav9-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libfreshclam2-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 clamav-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 clamav-devel-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libclamav9-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libfreshclam2-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 clamav-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 clamav-devel-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libclamav9-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libfreshclam2-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 clamav-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 clamav-devel-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libclamav9-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libfreshclam2-0.103.0-3.23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 clamav-0.103.11-150600.16.7 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 clamav-devel-0.103.11-150600.16.7 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libclamav9-0.103.11-150600.16.7 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libfreshclam2-0.103.11-150600.16.7 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 clamav-1.4.2-150600.18.9.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 clamav-devel-1.4.2-150600.18.9.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 clamav-docs-html-1.4.2-150600.18.9.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 clamav-milter-1.4.2-150600.18.9.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libclamav12-1.4.2-150600.18.9.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libclammspack0-1.4.2-150600.18.9.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libfreshclam3-1.4.2-150600.18.9.3 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 clamav-1.4.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 clamav-devel-1.4.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 clamav-docs-html-1.4.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 clamav-milter-1.4.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libclamav12-1.4.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libclammspack0-1.4.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libfreshclam3-1.4.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 clamav-0.103.0-lp151.2.12.1 as a component of openSUSE Leap 15.1 clamav-devel-0.103.0-lp151.2.12.1 as a component of openSUSE Leap 15.1 libclamav9-0.103.0-lp151.2.12.1 as a component of openSUSE Leap 15.1 libfreshclam2-0.103.0-lp151.2.12.1 as a component of openSUSE Leap 15.1 clamav-0.103.0-lp152.6.3.1 as a component of openSUSE Leap 15.2 clamav-devel-0.103.0-lp152.6.3.1 as a component of openSUSE Leap 15.2 libclamav9-0.103.0-lp152.6.3.1 as a component of openSUSE Leap 15.2 libfreshclam2-0.103.0-lp152.6.3.1 as a component of openSUSE Leap 15.2 clamav-0.103.3-1.4 as a component of openSUSE Tumbleweed clamav-devel-0.103.3-1.4 as a component of openSUSE Tumbleweed clamav-milter-0.103.3-1.4 as a component of openSUSE Tumbleweed libclamav9-0.103.3-1.4 as a component of openSUSE Tumbleweed libfreshclam2-0.103.3-1.4 as a component of openSUSE Tumbleweed clamav as a component of SLES for SAP Applications 11 SP3 clamav as a component of SUSE CaaS Platform 4.0 clamav-devel as a component of SUSE CaaS Platform 4.0 libclamav9 as a component of SUSE CaaS Platform 4.0 libfreshclam2 as a component of SUSE CaaS Platform 4.0 clamav as a component of SUSE Enterprise Storage 6 clamav as a component of SUSE Linux Enterprise Desktop 12 SP3 clamav as a component of SUSE Linux Enterprise Desktop 12 SP4 clamav as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 clamav as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS clamav-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libclamav9 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libfreshclam2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS clamav as a component of SUSE Linux Enterprise Module for Basesystem 15 clamav-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 libclamav7 as a component of SUSE Linux Enterprise Module for Basesystem 15 libclammspack0 as a component of SUSE Linux Enterprise Module for Basesystem 15 clamav as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata clamav as a component of SUSE Linux Enterprise Server 11 SP3 LTSS clamav as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata clamav as a component of SUSE Linux Enterprise Server 11 SP4 LTSS clamav as a component of SUSE Linux Enterprise Server 12 SP1-LTSS clamav as a component of SUSE Linux Enterprise Server 12 SP2-LTSS clamav as a component of SUSE Linux Enterprise Server 12 SP3 clamav as a component of SUSE Linux Enterprise Server 12 SP4 clamav as a component of SUSE Linux Enterprise Server 12-LTSS clamav as a component of SUSE Linux Enterprise Server 15 SP1-LTSS clamav-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libclamav9 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libfreshclam2 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS clamav as a component of SUSE Linux Enterprise Server for SAP Applications 12 clamav as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 clamav as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 clamav as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 clamav-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libclamav9 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libfreshclam2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper error-handling mechanisms when processing nested RAR files sent to an affected device. An attacker could exploit this vulnerability by sending a crafted RAR file to an affected device. An exploit could allow the attacker to view or create arbitrary files on the targeted system. CVE-2019-1785 SUSE Linux Enterprise Module for Basesystem 15 SP1:clamav-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:clamav-devel-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libclamav9-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libfreshclam2-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:clamav-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:clamav-devel-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libclamav9-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libfreshclam2-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:clamav-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:clamav-devel-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libclamav9-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libfreshclam2-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:clamav-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:clamav-devel-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libclamav9-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libfreshclam2-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:clamav-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:clamav-devel-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libclamav9-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:libfreshclam2-0.103.0-3.23.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:clamav-0.103.11-150600.16.7 SUSE Linux Enterprise Module for Basesystem 15 SP6:clamav-devel-0.103.11-150600.16.7 SUSE Linux Enterprise Module for Basesystem 15 SP6:libclamav9-0.103.11-150600.16.7 SUSE Linux Enterprise Module for Basesystem 15 SP6:libfreshclam2-0.103.11-150600.16.7 SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-1.4.2-150600.18.9.3 SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-devel-1.4.2-150600.18.9.3 SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-docs-html-1.4.2-150600.18.9.3 SUSE Linux Enterprise Module for Basesystem 15 SP7:clamav-milter-1.4.2-150600.18.9.3 SUSE Linux Enterprise Module for Basesystem 15 SP7:libclamav12-1.4.2-150600.18.9.3 SUSE Linux Enterprise Module for Basesystem 15 SP7:libclammspack0-1.4.2-150600.18.9.3 SUSE Linux Enterprise Module for Basesystem 15 SP7:libfreshclam3-1.4.2-150600.18.9.3 SUSE Linux Enterprise Server 16.0:clamav-1.4.3-160000.2.2 SUSE Linux Enterprise Server 16.0:clamav-devel-1.4.3-160000.2.2 SUSE Linux Enterprise Server 16.0:clamav-docs-html-1.4.3-160000.2.2 SUSE Linux Enterprise Server 16.0:clamav-milter-1.4.3-160000.2.2 SUSE Linux Enterprise Server 16.0:libclamav12-1.4.3-160000.2.2 SUSE Linux Enterprise Server 16.0:libclammspack0-1.4.3-160000.2.2 SUSE Linux Enterprise Server 16.0:libfreshclam3-1.4.3-160000.2.2 openSUSE Leap 15.1:clamav-0.103.0-lp151.2.12.1 openSUSE Leap 15.1:clamav-devel-0.103.0-lp151.2.12.1 openSUSE Leap 15.1:libclamav9-0.103.0-lp151.2.12.1 openSUSE Leap 15.1:libfreshclam2-0.103.0-lp151.2.12.1 openSUSE Leap 15.2:clamav-0.103.0-lp152.6.3.1 openSUSE Leap 15.2:clamav-devel-0.103.0-lp152.6.3.1 openSUSE Leap 15.2:libclamav9-0.103.0-lp152.6.3.1 openSUSE Leap 15.2:libfreshclam2-0.103.0-lp152.6.3.1 openSUSE Tumbleweed:clamav-0.103.3-1.4 openSUSE Tumbleweed:clamav-devel-0.103.3-1.4 openSUSE Tumbleweed:clamav-milter-0.103.3-1.4 openSUSE Tumbleweed:libclamav9-0.103.3-1.4 openSUSE Tumbleweed:libfreshclam2-0.103.3-1.4 SLES for SAP Applications 11 SP3:clamav SUSE Linux Enterprise Desktop 12 SP3:clamav SUSE Linux Enterprise Desktop 12 SP4:clamav SUSE Linux Enterprise High Performance Computing 12 SP4:clamav SUSE Linux Enterprise Module for Basesystem 15:clamav SUSE Linux Enterprise Module for Basesystem 15:clamav-devel SUSE Linux Enterprise Module for Basesystem 15:libclamav7 SUSE Linux Enterprise Module for Basesystem 15:libclammspack0 SUSE Linux Enterprise Server 11 SP1 for Teradata:clamav SUSE Linux Enterprise Server 11 SP3 LTSS:clamav SUSE Linux Enterprise Server 11 SP3 for Teradata:clamav SUSE Linux Enterprise Server 11 SP4 LTSS:clamav SUSE Linux Enterprise Server 12 SP1-LTSS:clamav SUSE Linux Enterprise Server 12 SP2-LTSS:clamav SUSE Linux Enterprise Server 12 SP3:clamav SUSE Linux Enterprise Server 12 SP4:clamav SUSE Linux Enterprise Server 12-LTSS:clamav SUSE Linux Enterprise Server for SAP Applications 12 SP2:clamav SUSE Linux Enterprise Server for SAP Applications 12 SP4:clamav SUSE Linux Enterprise Server for SAP Applications 12:clamav moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N