Search for packages
| purl | pkg:deb/debian/clamav@0.98.7%2Bdfsg-0%2Bdeb6u2 |
| Next non-vulnerable version | 1.4.4+dfsg-1 |
| Latest non-vulnerable version | 1.4.4+dfsg-1 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1346-uavy-pbdb
Aliases: CVE-2019-1787 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-2aju-u36p-gug9
Aliases: CVE-2022-20796 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-32nc-x9aw-a3fb
Aliases: CVE-2019-12625 |
ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages to an affected system. |
Affected by 20 other vulnerabilities. |
|
VCID-3rrt-vgz7-8bgz
Aliases: CVE-2015-2221 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 49 other vulnerabilities. |
|
VCID-3uwh-y2m1-nugc
Aliases: CVE-2018-1000085 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-4eva-e818-yfgq
Aliases: CVE-2016-1405 |
libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-125 and Web Security Appliance (WSA) devices before 9.0.1-135 and 9.1.x before 9.1.1-041, allows remote attackers to cause a denial of service (AMP process restart) via a crafted document, aka Bug IDs CSCuv78533 and CSCuw60503. |
Affected by 33 other vulnerabilities. |
|
VCID-4z4r-2w8m-r7dz
Aliases: CVE-2023-20032 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-5hnm-hz17-2bey
Aliases: CVE-2019-15961 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-63vt-1nc8-6kfc
Aliases: CVE-2025-20260 |
A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an affected device. This vulnerability exists because memory buffers are allocated incorrectly when PDF files are processed. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to trigger a buffer overflow, likely resulting in the termination of the ClamAV scanning process and a DoS condition on the affected software. Although unproven, there is also a possibility that an attacker could leverage the buffer overflow to execute arbitrary code with the privileges of the ClamAV process. |
Affected by 1 other vulnerability. |
|
VCID-7dcd-v8q9-b3bv
Aliases: CVE-2018-15378 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-8s2g-2brb-tfhq
Aliases: CVE-2019-1786 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-8y9g-m17c-kyey
Aliases: CVE-2016-1371 |
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable. |
Affected by 33 other vulnerabilities. |
|
VCID-a4nz-5cr8-13an
Aliases: CVE-2019-1789 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-aagg-bbac-rfez
Aliases: CVE-2017-6420 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-avvd-1gv9-eyb9
Aliases: CVE-2018-0202 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-cc9p-w184-zfej
Aliases: CVE-2020-3327 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-d3u3-epeb-guh9
Aliases: CVE-2023-20052 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-dfvv-cqbj-mubr
Aliases: CVE-2015-2222 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 49 other vulnerabilities. |
|
VCID-dn26-zfsc-ryec
Aliases: CVE-2022-20785 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-egd5-p68y-wfdy
Aliases: CVE-2021-1404 |
A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a heap buffer over-read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-fp31-7krz-abbs
Aliases: CVE-2022-20770 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-gg41-q6x3-bbbw
Aliases: CVE-2015-2668 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 49 other vulnerabilities. |
|
VCID-ggz7-h35v-p7ep
Aliases: CVE-2024-20505 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could lead to arbitrary code execution. |
Affected by 1 other vulnerability. |
|
VCID-guz8-mfzu-uuc9
Aliases: CVE-2017-6419 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-h46v-x33x-t3ep
Aliases: CVE-2018-0360 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-j2gt-uvam-hufk
Aliases: CVE-2017-12377 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-kurn-1uay-qqap
Aliases: CVE-2022-20792 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-mdfk-5ked-t3bu
Aliases: CVE-2023-20197 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could lead to arbitrary code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-mu6w-nub4-z3ef
Aliases: CVE-2022-20698 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 12 other vulnerabilities. |
|
VCID-mufb-kvfq-mubz
Aliases: CVE-2019-1785 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-n51n-m2r7-kbdy
Aliases: CVE-2019-12900 |
bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). |
Affected by 20 other vulnerabilities. |
|
VCID-new8-u5x9-nkeb
Aliases: CVE-2021-1405 |
A vulnerability in ClamAV could lead to a Denial of Service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-ntvt-zdsj-1fgt
Aliases: CVE-2017-6418 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-nu3x-4yc8-ufg6
Aliases: CVE-2018-0361 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-p5hg-2rdb-z3hq
Aliases: CVE-2019-1788 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-qacw-bby8-9kdg
Aliases: CVE-2019-1798 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-qwwa-mf8k-2fdc
Aliases: CVE-2017-12378 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-seed-bera-73ez
Aliases: CVE-2017-12379 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-tzph-y73s-6qb9
Aliases: CVE-2022-20771 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could result in remote code execution. |
Affected by 5 other vulnerabilities. |
|
VCID-u3pj-kant-effb
Aliases: CVE-2020-3123 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 20 other vulnerabilities. |
|
VCID-u4qp-vcnh-c3dd
Aliases: CVE-2017-12374 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-uzg5-a999-afhp
Aliases: CVE-2015-2305 |
security update |
Affected by 49 other vulnerabilities. |
|
VCID-uzyz-uw16-7ufk
Aliases: CVE-2015-2170 |
Multiple vulnerabilities have been found in ClamAV, possibly resulting in Denial of Service. |
Affected by 49 other vulnerabilities. |
|
VCID-vbmy-urt6-myha
Aliases: CVE-2020-3341 |
A vulnerability in the PDF archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.101 - 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a stack buffer overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-vdhk-r67a-s3fr
Aliases: CVE-2025-20128 |
A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer underflow in a bounds check that allows for a heap buffer overflow read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the ClamAV scanning process, resulting in a DoS condition on the affected software. For a description of this vulnerability, see the . Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. |
Affected by 1 other vulnerability. |
|
VCID-vqyc-hxfb-ufav
Aliases: CVE-2016-1372 |
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file. |
Affected by 33 other vulnerabilities. |
|
VCID-wjvc-p75d-p3a9
Aliases: CVE-2024-20506 |
Multiple vulnerabilities have been discovered in ClamAV, the worst of which could lead to arbitrary code execution. |
Affected by 1 other vulnerability. |
|
VCID-xfzw-afgg-fqdc
Aliases: CVE-2020-3481 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-xwgq-w8k4-xbcn
Aliases: CVE-2021-1252 |
A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper error handling that may result in an infinite loop. An attacker could exploit this vulnerability by sending a crafted Excel file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process hang, resulting in a denial of service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-y3k7-e14w-xqbn
Aliases: CVE-2017-12375 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-y5mg-rpf8-cbe7
Aliases: CVE-2017-11423 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-zbkr-bd4m-77cs
Aliases: CVE-2017-12380 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
|
VCID-zeub-1qhs-pyfh
Aliases: CVE-2020-3350 |
Multiple vulnerabilities have been found in ClamAV, the worst of which could result in a Denial of Service condition. |
Affected by 12 other vulnerabilities. |
|
VCID-zys1-2pnp-h3an
Aliases: CVE-2017-12376 |
Multiple vulnerabilities have been found in ClamAV, the worst of which may allow execution of arbitrary code. |
Affected by 33 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||