Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/clamav@0.86.1?distro=trixie
purl pkg:deb/debian/clamav@0.86.1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-s15m-qwrh-bqdq The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read. CVE-2005-1923
VCID-th8f-btfy-1yg4 The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open connection, which prevents ClamAV from reloading. CVE-2005-2070

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T09:46:23.475903+00:00 Debian Importer Fixing VCID-s15m-qwrh-bqdq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:42:20.700154+00:00 Debian Importer Fixing VCID-th8f-btfy-1yg4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T06:31:32.906403+00:00 Debian Importer Fixing VCID-s15m-qwrh-bqdq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:51:02.273003+00:00 Debian Importer Fixing VCID-th8f-btfy-1yg4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:05:52.398526+00:00 Debian Importer Fixing VCID-s15m-qwrh-bqdq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:02:25.154894+00:00 Debian Importer Fixing VCID-th8f-btfy-1yg4 https://security-tracker.debian.org/tracker/data/json 38.1.0