CL
Product
Clamav
103
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 32Medium 19Low 1
Watch
Add Clamav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0202 | 5.5 | Mar 27 | clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device Affected: through 0.99.3 |
| CVE-2018-1000085 | 5.5 | Mar 13 | ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xar_hash_check() that can result in Leaking of memory, may help in… Affected: 0.99.3 |
| CVE-2017-12378 | 5.5 | Jan 26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an… Affected: through 0.99.2 |
| CVE-2017-6420 | 5.5 | Aug 7 | The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression Affected: 0.99.2 |
| CVE-2017-6418 | 5.5 | Aug 7 | libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message Affected: 0.99.2 |
| CVE-2016-1372 | 5.5 | Oct 3 | ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file Affected: through 0.99.1 |
| CVE-2016-1371 | 5.5 | Oct 3 | ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable Affected: through 0.99.1 |
| CVE-2024-20328 | 5.3 | Mar 1 | A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The… Affected: 1.0.0 before 1.0.5; 1.2.0 before 1.2.2 |
| CVE-2023-20052 | 5.3 | Mar 1 | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier,… Affected: through 0.103.7; 0.104.0 through 0.105.1; 1.0.0; 1.0.0; 1.0.0 |
| CVE-2018-0361 | 3.3 | Jul 16 | ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file Affected: before 0.100.1 |
| CVE-2015-2668 | – | May 12 | ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted xz archive file Affected: through 0.98.6 |
| CVE-2015-2222 | – | May 12 | ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted petite packed file Affected: through 0.98.6 |
| CVE-2015-2221 | – | May 12 | ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted y0da cryptor file Affected: through 0.98.6 |
| CVE-2015-2170 | – | May 12 | The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted file Affected: through 0.98.6 |
| CVE-2015-1463 | – | Feb 3 | ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization." Affected: through 0.98.5 |
| CVE-2015-1462 | – | Feb 3 | ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition." Affected: through 0.98.5 |
| CVE-2015-1461 | – | Feb 3 | ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap out of bounds condition." Affected: through 0.98.5 |
| CVE-2014-9328 | – | Feb 3 | ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition." Affected: through 0.98.5 |
| CVE-2014-9050 | – | Dec 1 | Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service (crash) via a crafted y0da… Affected: through 0.94.3; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2013-6497 | – | Dec 1 | clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file Affected: through 0.98.4 |
| CVE-2013-2021 | – | May 13 | pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted length value in an encrypted PDF file Affected: 0.97.1; 0.97.2; 0.97.3; 0.97.4; 0.97.5; 0.97.6; +1 more |
| CVE-2013-2020 | – | May 13 | Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size… Affected: through 0.97.7; 0.9; 0.90; 0.90; 0.90; 0.90; +34 more |
| CVE-2012-1459 | – | Mar 21 | The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus… Affected: 0.96.4 |
| CVE-2012-1458 | – | Mar 21 | The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of… Affected: 0.96.4 |
| CVE-2012-1457 | – | Mar 21 | The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal… Affected: 0.96.4 |
| CVE-2012-1443 | – | Mar 21 | The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint… Affected: 0.96.4 |
| CVE-2012-1419 | – | Mar 21 | The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial [aliases]… Affected: 0.96.4 |
| CVE-2011-3627 | – | Nov 17 | The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and… Affected: through 0.97.2; 0.9; 0.90; 0.90; 0.90; 0.90; +34 more |
| CVE-2011-2721 | – | Aug 5 | Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an… Affected: through 0.97.1; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2011-1003 | – | Feb 23 | Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via… Affected: through 0.96.5; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2010-4261 | – | Dec 7 | Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruption and application… Affected: through 0.96.4; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2010-4260 | – | Dec 7 | Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service (application crash) or possibly execute… Affected: through 0.96.4; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2010-4479 | – | Dec 7 | Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code… Affected: through 0.96.4; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2010-3434 | – | Sep 30 | Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service (application crash) or… Affected: through 0.96.2; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2010-1640 | – | May 26 | Off-by-one error in the parseicon function in libclamav/pe_icons.c in ClamAV 0.96 allows remote attackers to cause a denial of service (crash) via a crafted PE icon that triggers… Affected: 0.96 |
| CVE-2010-1639 | – | May 26 | The cli_pdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service (crash) via a malformed PDF file, related to an inconsistency… Affected: through 0.96; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2010-1311 | – | Apr 8 | The qtm_decompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service (memory corruption and application crash) via a… Affected: through 0.96; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2010-0098 | – | Apr 8 | ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible… Affected: through 0.96; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2008-6845 | – | Jul 2 | The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file Affected: through 0.93.3; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2009-1372 | – | Apr 23 | Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application… Affected: through 0.95; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2009-1371 | – | Apr 23 | The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack… Affected: through 0.95; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2009-1270 | – | Apr 8 | libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang Affected: before 0.95 |
| CVE-2008-6680 | – | Apr 8 | libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error Affected: through 0.94.2; 0.93.1; 0.94; 0.94.1 |
| CVE-2009-1241 | – | Apr 3 | Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive Affected: before 0.95 |
| CVE-2008-5525 | – | Dec 12 | ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka… Affected: 0.93.1; 0.94.1 |
| CVE-2008-3914 | – | Sep 11 | Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c… Affected: through 0.93.3 |
| CVE-2008-3913 | – | Sep 11 | Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to… Affected: before 0.94 |
| CVE-2008-3912 | – | Sep 11 | libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an out-of-memory condition Affected: before 0.94 |
| CVE-2008-0728 | – | Feb 12 | The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption." Affected: through 0.92; 0.01; 0.02; 0.3; 0.03; 0.05; +34 more |
| CVE-2007-2650 | – | May 14 | The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a… Affected: before 0.90.3 |