Lookup for vulnerable packages by Package URL.

Purlpkg:ebuild/app-antivirus/clamav@0.97.3
Typeebuild
Namespaceapp-antivirus
Nameclamav
Version0.97.3
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version0.98
Latest_non_vulnerable_version1.4.1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-414d-bpz7-uqff
vulnerability_id VCID-414d-bpz7-uqff
summary Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka (1) "bb #2358" and (2) "bb #2396."
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-4260
reference_id
reference_type
scores
0
value 0.09158
scoring_system epss
scoring_elements 0.92813
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-4260
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4260
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4260
2
reference_url https://security.gentoo.org/glsa/201110-20
reference_id GLSA-201110-20
reference_type
scores
url https://security.gentoo.org/glsa/201110-20
3
reference_url https://usn.ubuntu.com/1031-1/
reference_id USN-1031-1
reference_type
scores
url https://usn.ubuntu.com/1031-1/
fixed_packages
0
url pkg:ebuild/app-antivirus/clamav@0.97.3
purl pkg:ebuild/app-antivirus/clamav@0.97.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-antivirus/clamav@0.97.3
aliases CVE-2010-4260
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-414d-bpz7-uqff
1
url VCID-59vv-9bgn-9qbq
vulnerability_id VCID-59vv-9bgn-9qbq
summary Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-4261
reference_id
reference_type
scores
0
value 0.13891
scoring_system epss
scoring_elements 0.94423
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-4261
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4261
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4261
2
reference_url https://security.gentoo.org/glsa/201110-20
reference_id GLSA-201110-20
reference_type
scores
url https://security.gentoo.org/glsa/201110-20
3
reference_url https://usn.ubuntu.com/1031-1/
reference_id USN-1031-1
reference_type
scores
url https://usn.ubuntu.com/1031-1/
fixed_packages
0
url pkg:ebuild/app-antivirus/clamav@0.97.3
purl pkg:ebuild/app-antivirus/clamav@0.97.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-antivirus/clamav@0.97.3
aliases CVE-2010-4261
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-59vv-9bgn-9qbq
2
url VCID-74vc-fgtp-muck
vulnerability_id VCID-74vc-fgtp-muck
summary Off-by-one error in the cli_hm_scan function in matcher-hash.c in libclamav in ClamAV before 0.97.2 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message that is not properly handled during certain hash calculations.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-2721
reference_id
reference_type
scores
0
value 0.07432
scoring_system epss
scoring_elements 0.91868
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-2721
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2721
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2721
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=635599
reference_id 635599
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=635599
3
reference_url https://security.gentoo.org/glsa/201110-20
reference_id GLSA-201110-20
reference_type
scores
url https://security.gentoo.org/glsa/201110-20
4
reference_url https://usn.ubuntu.com/1179-1/
reference_id USN-1179-1
reference_type
scores
url https://usn.ubuntu.com/1179-1/
fixed_packages
0
url pkg:ebuild/app-antivirus/clamav@0.97.3
purl pkg:ebuild/app-antivirus/clamav@0.97.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-antivirus/clamav@0.97.3
aliases CVE-2011-2721
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-74vc-fgtp-muck
3
url VCID-7mev-x1rm-e7d8
vulnerability_id VCID-7mev-x1rm-e7d8
summary Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-1003
reference_id
reference_type
scores
0
value 0.09445
scoring_system epss
scoring_elements 0.9294
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-1003
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1003
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1003
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617444
reference_id 617444
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617444
3
reference_url https://security.gentoo.org/glsa/201110-20
reference_id GLSA-201110-20
reference_type
scores
url https://security.gentoo.org/glsa/201110-20
4
reference_url https://usn.ubuntu.com/1076-1/
reference_id USN-1076-1
reference_type
scores
url https://usn.ubuntu.com/1076-1/
fixed_packages
0
url pkg:ebuild/app-antivirus/clamav@0.97.3
purl pkg:ebuild/app-antivirus/clamav@0.97.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-antivirus/clamav@0.97.3
aliases CVE-2011-1003
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7mev-x1rm-e7d8
4
url VCID-c2ew-gnkn-ruh4
vulnerability_id VCID-c2ew-gnkn-ruh4
summary bzip2: integer overflow flaw in BZ2_decompress
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0405.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0405.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-0405
reference_id
reference_type
scores
0
value 0.07688
scoring_system epss
scoring_elements 0.92031
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-0405
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0405
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0405
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=627882
reference_id 627882
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=627882
4
reference_url https://security.gentoo.org/glsa/201110-20
reference_id GLSA-201110-20
reference_type
scores
url https://security.gentoo.org/glsa/201110-20
5
reference_url https://security.gentoo.org/glsa/201301-05
reference_id GLSA-201301-05
reference_type
scores
url https://security.gentoo.org/glsa/201301-05
6
reference_url https://access.redhat.com/errata/RHSA-2010:0703
reference_id RHSA-2010:0703
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0703
7
reference_url https://access.redhat.com/errata/RHSA-2010:0858
reference_id RHSA-2010:0858
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0858
8
reference_url https://usn.ubuntu.com/986-1/
reference_id USN-986-1
reference_type
scores
url https://usn.ubuntu.com/986-1/
9
reference_url https://usn.ubuntu.com/986-2/
reference_id USN-986-2
reference_type
scores
url https://usn.ubuntu.com/986-2/
10
reference_url https://usn.ubuntu.com/986-3/
reference_id USN-986-3
reference_type
scores
url https://usn.ubuntu.com/986-3/
fixed_packages
0
url pkg:ebuild/app-antivirus/clamav@0.97.3
purl pkg:ebuild/app-antivirus/clamav@0.97.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-antivirus/clamav@0.97.3
aliases CVE-2010-0405
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c2ew-gnkn-ruh4
5
url VCID-d69c-ugbh-13ew
vulnerability_id VCID-d69c-ugbh-13ew
summary Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtained from third party information.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-3434
reference_id
reference_type
scores
0
value 0.10909
scoring_system epss
scoring_elements 0.93513
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-3434
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3434
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3434
2
reference_url https://security.gentoo.org/glsa/201110-20
reference_id GLSA-201110-20
reference_type
scores
url https://security.gentoo.org/glsa/201110-20
fixed_packages
0
url pkg:ebuild/app-antivirus/clamav@0.97.3
purl pkg:ebuild/app-antivirus/clamav@0.97.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-antivirus/clamav@0.97.3
aliases CVE-2010-3434
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d69c-ugbh-13ew
6
url VCID-dc5e-7g3m-7yh8
vulnerability_id VCID-dc5e-7g3m-7yh8
summary Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka "bb #2380," a different vulnerability than CVE-2010-4260.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-4479
reference_id
reference_type
scores
0
value 0.09158
scoring_system epss
scoring_elements 0.92813
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-4479
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4479
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4479
2
reference_url https://security.gentoo.org/glsa/201110-20
reference_id GLSA-201110-20
reference_type
scores
url https://security.gentoo.org/glsa/201110-20
3
reference_url https://usn.ubuntu.com/1031-1/
reference_id USN-1031-1
reference_type
scores
url https://usn.ubuntu.com/1031-1/
fixed_packages
0
url pkg:ebuild/app-antivirus/clamav@0.97.3
purl pkg:ebuild/app-antivirus/clamav@0.97.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-antivirus/clamav@0.97.3
aliases CVE-2010-4479
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dc5e-7g3m-7yh8
7
url VCID-mqcb-rwgw-tug5
vulnerability_id VCID-mqcb-rwgw-tug5
summary The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-3627
reference_id
reference_type
scores
0
value 0.02718
scoring_system epss
scoring_elements 0.86174
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-3627
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3627
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3627
2
reference_url https://security.gentoo.org/glsa/201110-20
reference_id GLSA-201110-20
reference_type
scores
url https://security.gentoo.org/glsa/201110-20
3
reference_url https://usn.ubuntu.com/1258-1/
reference_id USN-1258-1
reference_type
scores
url https://usn.ubuntu.com/1258-1/
fixed_packages
0
url pkg:ebuild/app-antivirus/clamav@0.97.3
purl pkg:ebuild/app-antivirus/clamav@0.97.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-antivirus/clamav@0.97.3
aliases CVE-2011-3627
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mqcb-rwgw-tug5
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:ebuild/app-antivirus/clamav@0.97.3