Skip to content
OpenAdvisories
High DLA-2314-1 3 CVEs

clamav - security update

Published Aug 6, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 clamav 0.102.4+dfsg-0+deb9u1

Vulnerabilities 3

  • High 7.5
    CVE-2020-3327

    ClamAV ARJ Archive Parsing Denial of Service Vulnerability

    A vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a heap buffer over…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Alpine
  • High 7.5
    CVE-2020-3481

    Clam AntiVirus (ClamAV) Software Null Pointer Dereference Vulnerability

    A vulnerability in the EGG archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.0 - 0.102.3 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a null p…

    Cisco ClamAV clamav clamav Network devices Debian Ubuntu Alpine
  • Medium 5.5
    CVE-2020-3350

    Cisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability

    A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could …

    Cisco Cisco AMP for Endpoints clamav clamav Network devices Debian Ubuntu Alpine