CL
Product
Clamav
103
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 32Medium 19Low 1
Watch
Add Clamav to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-15961 | 6.5 | Jan 15 | A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial… Affected: through 0.101.4; 0.102.0 |
| CVE-2024-20506 | 6.1 | Sep 4 | ClamAV Privilege Handling Escalation Vulnerability Affected: before 0.103.12; 0.104.0 before 1.0.7; 1.2.0 before 1.3.2; 1.4.0 |
| CVE-2022-20796 | 5.5 | May 4 | On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus… Affected: 0.103.4; 0.103.5; 0.104.1; 0.104.2 |
| CVE-2021-27506 | 5.5 | Mar 19 | The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files Affected: through 0.103.1 |
| CVE-2019-1798 | 5.5 | Apr 8 | A vulnerability in the Portable Executable (PE) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote… Affected: through 0.101.1 |
| CVE-2019-1788 | 5.5 | Apr 8 | A vulnerability in the Object Linking & Embedding (OLE2) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated,… Affected: through 0.101.1 |
| CVE-2019-1787 | 5.5 | Apr 8 | A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote… Affected: through 0.101.1 |
| CVE-2019-1786 | 5.5 | Apr 8 | A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated,… Affected: 0.101.0; 0.101.1 |
| CVE-2018-15378 | 5.5 | Oct 15 | A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition Affected: before 0.100.2 |
| CVE-2018-0360 | 5.5 | Jul 16 | ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file Affected: before 0.100.1 |
| CVE-2018-0202 | 5.5 | Mar 27 | clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device Affected: through 0.99.3 |
| CVE-2018-1000085 | 5.5 | Mar 13 | ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xar_hash_check() that can result in Leaking of memory, may help in… Affected: 0.99.3 |
| CVE-2017-12378 | 5.5 | Jan 26 | ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an… Affected: through 0.99.2 |
| CVE-2017-6420 | 5.5 | Aug 7 | The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression Affected: 0.99.2 |
| CVE-2017-6418 | 5.5 | Aug 7 | libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message Affected: 0.99.2 |
| CVE-2016-1372 | 5.5 | Oct 3 | ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file Affected: through 0.99.1 |
| CVE-2016-1371 | 5.5 | Oct 3 | ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable Affected: through 0.99.1 |
| CVE-2024-20328 | 5.3 | Mar 1 | A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The… Affected: 1.0.0 before 1.0.5; 1.2.0 before 1.2.2 |
| CVE-2023-20052 | 5.3 | Mar 1 | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier,… Affected: through 0.103.7; 0.104.0 through 0.105.1; 1.0.0; 1.0.0; 1.0.0 |
Showing 19